last executing test programs: 16m21.514813896s ago: executing program 32 (id=256): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) pwritev2(r3, 0x0, 0x0, 0xcb3, 0x200, 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r4, 0x400, 0x0) socket(0x10, 0x3, 0x0) 10m18.068191641s ago: executing program 33 (id=1713): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfa, 0x1528, &(0x7f0000000140)="$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") creat(0x0, 0x9e) mount(0x0, 0x0, 0x0, 0x100801, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) getxattr(&(0x7f0000001680)='./file0\x00', 0x0, 0x0, 0xfffffef5) 10m11.538262928s ago: executing program 34 (id=1737): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m27.741011318s ago: executing program 35 (id=2579): r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x1, 0x3, 0x2, 0xff, "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", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0xd, 0x1, 0xf5, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x1, 0x1, 0x1}, 0x7, 0x1, 0x0, 0x0, "57fea939ad8c8b8f"}, 0x2}}]}, 0x154}}, 0x240448c8) ftruncate(r0, 0x800799c) pread64(r0, &(0x7f0000001540)=""/4085, 0xff5, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x6, 0x65, 0x7, '\x00', 0x1ff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m51.11598872s ago: executing program 36 (id=2784): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x100000000003, 0x161341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0xf00, 0x4ec, 0x0, 0xfffffff9, 0x0}) 5m46.274618625s ago: executing program 37 (id=3134): eventfd(0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xdfffffffd927fc35) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) getgroups(0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) 5m42.669994734s ago: executing program 38 (id=3146): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000580)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000000400)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18dd80b, 0x0, 0x40, 0x0, &(0x7f0000000140)) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 5m37.5717346s ago: executing program 39 (id=3160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) close(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m2.673741936s ago: executing program 0 (id=3756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4m1.359489338s ago: executing program 0 (id=3758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000fc0)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0xfffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m0.417739631s ago: executing program 0 (id=3761): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x60600) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 4m0.374341852s ago: executing program 3 (id=3762): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1, 0x35c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) 3m59.330961008s ago: executing program 0 (id=3768): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000700)={[{@nodiscard}, {@jqfmt_vfsv0}, {@errors_remount}, {@noquota}]}, 0xfc, 0x4b4, &(0x7f0000000c80)="$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") llistxattr(&(0x7f0000001bc0)='.\x00', 0x0, 0x0) r1 = syz_io_uring_complete(0x0, r0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0xfe, 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x8200, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r2, 0x0, 0x0) 3m58.297488213s ago: executing program 3 (id=3773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r4, 0x0, 0x0) 3m58.02962652s ago: executing program 0 (id=3774): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 3m57.915369403s ago: executing program 0 (id=3776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a000004050001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 3m57.853758544s ago: executing program 3 (id=3778): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x60600) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 3m57.419203115s ago: executing program 40 (id=3776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a000004050001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 3m56.79912127s ago: executing program 3 (id=3785): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000700)={[{@nodiscard}, {@jqfmt_vfsv0}, {@errors_remount}, {@noquota}]}, 0xfc, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") llistxattr(&(0x7f0000001bc0)='.\x00', 0x0, 0x0) r1 = syz_io_uring_complete(0x0, r0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0xfe, 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x8200, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r2, 0x0, 0x0) 3m55.003124534s ago: executing program 3 (id=3791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005140)=@newtfilter={0x30, 0x2c, 0xd27, 0x11, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) keyctl$set_reqkey_keyring(0xe, 0x3) rt_tgsigqueueinfo(r0, 0x0, 0x33, &(0x7f0000000240)={0x15, 0x3, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) 3m53.56165083s ago: executing program 3 (id=3805): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000001c0)="110000000200010001001a", 0xb) 3m53.469647632s ago: executing program 41 (id=3805): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x3) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000001c0)="110000000200010001001a", 0xb) 3m40.333431736s ago: executing program 1 (id=3939): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x2185dc, &(0x7f0000000b40)=ANY=[], 0x1, 0x122a, &(0x7f00000026c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x50100, 0x104) io_setup(0x7, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x600}]) 3m40.18427733s ago: executing program 1 (id=3944): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x1, 0x0, 0x101, 0x100}}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) 3m40.14639062s ago: executing program 1 (id=3945): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3m40.056916133s ago: executing program 1 (id=3947): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82000, 0x1c9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xb, 0x12, r0, 0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 3m39.999222044s ago: executing program 1 (id=3948): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/15], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r0, 0x0, 0x80) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) gettid() recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 3m39.885828217s ago: executing program 1 (id=3950): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 3m39.839393788s ago: executing program 42 (id=3950): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 3m38.105630381s ago: executing program 7 (id=3986): sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4040800) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40) 3m37.214441432s ago: executing program 7 (id=3997): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x2, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 3m36.300328525s ago: executing program 7 (id=4004): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x13, 0x10, 0x2}, 0x50) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x20000001}) close(r1) 3m36.237607926s ago: executing program 7 (id=4006): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 3m36.237545206s ago: executing program 7 (id=4007): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0400000010000000380012800c0001006d6163766c616e002800028008000900ffffffff08000300010000000400058008000700ff0f00000800010010000000140035006d6163766c616e30"], 0x6c}}, 0x8000) 3m36.201078958s ago: executing program 7 (id=4008): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./cgroup\x00', 0x2) 3m36.163553038s ago: executing program 43 (id=4008): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x12) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./cgroup\x00', 0x2) 3m26.128235485s ago: executing program 4 (id=4122): eventfd2(0x80000000, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 3m26.128152865s ago: executing program 4 (id=4123): mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 3m26.087477646s ago: executing program 4 (id=4125): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/100, 0x64) 3m26.086456417s ago: executing program 4 (id=4126): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 3m26.057203047s ago: executing program 4 (id=4129): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='r:', 0x2) 3m26.001375699s ago: executing program 4 (id=4131): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x30, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x31, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff81000000000000008899aabbccddeeff001122334455667755666b6f23427e372809ff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x38, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 3m25.904722631s ago: executing program 44 (id=4131): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x30, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x31, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff81000000000000008899aabbccddeeff001122334455667755666b6f23427e372809ff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x38, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 4.676579664s ago: executing program 5 (id=5864): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f0000000540)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f0000000640)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f00000006c0)='midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r9, &(0x7f0000000740)='dummy_udc.0\x00', 0xb) r10 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x15, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r10, 0x80045505, &(0x7f0000000800)=0x2) ioctl$USBDEVFS_SETCONFIGURATION(r10, 0x80045505, &(0x7f0000000804)) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000840)={0x0, 0x9, 0x0, 0x0, 0x0, 0x3e8, 0x0}) 4.626205786s ago: executing program 5 (id=5865): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='dummy_udc.0', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='hello', 0x5) nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0) 4.516468128s ago: executing program 2 (id=5866): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f0000000540)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f0000000640)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f00000006c0)='midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r9, &(0x7f0000000740)='dummy_udc.0\x00', 0xb) r10 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x15, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r10, 0x80045505, &(0x7f0000000800)=0x2) ioctl$USBDEVFS_SETCONFIGURATION(r10, 0x80045505, &(0x7f0000000804)) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000840)={0x0, 0x9, 0x0, 0x0, 0x0, 0x3e8, 0x0}) 4.481032379s ago: executing program 2 (id=5868): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000200)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='0x0525', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0xa4a1', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='dummy_udc.0', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='\n', 0x1) 4.43107685s ago: executing program 9 (id=5869): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{r3}, &(0x7f0000001240), &(0x7f0000001280)='%-010d \x00'}, 0x20) 4.411274261s ago: executing program 2 (id=5870): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.04546746s ago: executing program 6 (id=5873): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000000000000000160000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x6c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xa, 0xb, 0x2, 0x6, 0x80, 0x7, 0x2, 0x2, [{0x7, 0x1, 0x9, 0x7}, {0xb, 0x2, 0x6, 0x8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x14}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 3.991139671s ago: executing program 6 (id=5876): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000200)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') write(0xffffffffffffffff, &(0x7f00000002c0)='0x0525', 0x6) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='0xa4a1', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='dummy_udc.0', 0xb) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='\n', 0x1) close(r2) 3.907905713s ago: executing program 6 (id=5878): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r1, r1, 0x0, 0x1000000201005) 3.539371752s ago: executing program 5 (id=5879): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8010001, 0x3a10, 0x200004, 0x2003}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3.522246703s ago: executing program 9 (id=5880): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000200)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='0x0525', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0xa4a1', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='dummy_udc.0', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='\n', 0x1) 3.443280325s ago: executing program 5 (id=5881): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f0000000540)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f0000000640)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f00000006c0)='midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r9, &(0x7f0000000740)='dummy_udc.0\x00', 0xb) r10 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x15, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r10, 0x80045505, &(0x7f0000000800)=0x2) ioctl$USBDEVFS_SETCONFIGURATION(r10, 0x80045505, &(0x7f0000000804)) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000840)={0x0, 0x9, 0x0, 0x0, 0x0, 0x3e8, 0x0}) 3.426559225s ago: executing program 2 (id=5882): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)='\'\x00', r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)) 3.411106105s ago: executing program 9 (id=5883): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 3.386383576s ago: executing program 2 (id=5884): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}]}, 0x24}}, 0x0) fsopen(0x0, 0x0) ptrace(0x10, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10c52, &(0x7f0000000480)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@shortname_winnt}, {@numtail}, {@rodir}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@shortname_win95}, {@shortname_lower}, {@shortname_win95}, {@utf8no}, {@shortname_win95}, {@numtail}]}, 0x3, 0x27b, &(0x7f0000000640)="$eJzs3cFqK1UYAOB/mqRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE/gEPo8b8QV8AC93d7u43LmkM0nTyyQlvWlT7v2+TQ//+f85/5kZ2tWc/vBB//jw5Ozo4tf/otFIYm0nduIyiXasxdjvUerfJ+VxAOCRu8yyeJrl6nno/GZGbUZlde3emwMA7sX03/9V9wIAPIyvv/n2i939/b2v0rQR0f9j0Eki/5nP7x7FT9GLbmxFK55HZBP5+LPP9/eimo6046P+cNAZVfa//7u4/u7/EVf129GKdnn9dpqbqh8OOrV4p1h/pxfdL/+KVrxXXv9JSX101uPjD6f634xW/PNjnEQvDovexvW/bafpp9mfz375bhQd1SfDQac+ySuyKw/6YAAAAAAAAAAAAAAAAAAAAAAAeKNtphPtm+fvjA/+nzM/53yg4dT5PFtpmmZJnn9dX433q1Fd5d4BAAAAAAAAAAAAAAAAAADgsTg7//n4oNfrni51MP6sv2QqXtyM1CPi7mttLFoVlaK1XhKx2Fq1qF9V3p5cWXAXzVE/3dOkGst7BMkk0pye2oh8rVGkmQ+mIq+9eiOuBuO36/ggue3hNspekiUMspLXrzKzav3VSLPYQUlyc87q6+/eqeesNWMqiYja5GbOv05tuffw4X4HAQAAAAAAAAAAAAAAAAAAueuPfksmL1bQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACswPX//19gMCyKZ+VkldGgGkVkxVsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLfAyAAD//0MUZ+o=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 3.383403896s ago: executing program 5 (id=5885): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.269200979s ago: executing program 9 (id=5886): close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)='syzkaller%d', 0xb) chdir(&(0x7f0000001100)='./config/usb_gadget/g1\x00') symlink(&(0x7f0000001200)='functions/ecm.usb0\x00', &(0x7f0000001300)='configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001400)='UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000001500)='dummy_udc.0', 0xb) r2 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000001700)={'syzkaller0\x00', 0x41}) 3.268208569s ago: executing program 9 (id=5887): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe88000000000000000000000000010100"/56, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000800000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 3.23340448s ago: executing program 9 (id=5888): syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e00500060001010203010902190001010080320904000001ff00000007058103400001"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='none\x00', &(0x7f0000000280)='./debug\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./debug/kcov\x00', 0x2, 0x0) 3.017601985s ago: executing program 8 (id=5889): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 2.980263746s ago: executing program 6 (id=5890): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{r3}, &(0x7f0000001240), &(0x7f0000001280)='%-010d \x00'}, 0x20) 2.909578458s ago: executing program 8 (id=5891): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f0000000540)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f0000000640)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f00000006c0)='midi.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000740)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000780)={0x0, 0x1dcd6500}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x15, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f0000000800)=0x2) ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f0000000804)) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000840)={0x0, 0x9, 0x0, 0x0, 0x0, 0x3e8, 0x0}) 2.907018588s ago: executing program 5 (id=5892): openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.391486851s ago: executing program 8 (id=5893): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x8010001, 0x3a10, 0x200004, 0x2003}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 2.324786172s ago: executing program 8 (id=5894): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)='\'\x00', r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)) 2.296194303s ago: executing program 8 (id=5895): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f0000000540)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f0000000640)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f00000006c0)='midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r9, &(0x7f0000000740)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000780)={0x0, 0x1dcd6500}, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000800)=0x2) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000804)) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000840)={0x0, 0x9, 0x0, 0x0, 0x0, 0x3e8, 0x0}) 2.067999559s ago: executing program 6 (id=5896): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.971934961s ago: executing program 6 (id=5897): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000040)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0xdc, &(0x7f0000000840)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x69) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x8000, 0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='10', 0x2) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='100\x00', 0x3) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) setrlimit(0x40000000000008, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 1.783713326s ago: executing program 2 (id=5898): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe88000000000000000000000000010100"/56, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000800000000000900000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 0s ago: executing program 8 (id=5899): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000140)={0x1, 0x2, 0xffffffff, 0x0, 0x4eb}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000001200)='control/header/h\x00', &(0x7f0000001300)='control/class/ss/h\x00') kernel console output (not intermixed with test programs): recognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15045 comm=syz.5.5000 [ 916.899350][T15082] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 918.067941][T15141] loop5: detected capacity change from 0 to 256 [ 918.330669][T15139] loop6: detected capacity change from 0 to 40427 [ 918.339283][T15146] overlayfs: failed to clone upperpath [ 918.349984][T15139] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 918.376728][T15139] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 918.428111][T15139] F2FS-fs (loop6): Image doesn't support compression [ 918.469147][T15139] F2FS-fs (loop6): Image doesn't support compression [ 918.506757][T15139] F2FS-fs (loop6): invalid crc value [ 918.530281][T15139] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 918.741414][T15139] F2FS-fs (loop6): Start checkpoint disabled! [ 918.751581][T15139] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 918.864066][T15139] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 918.874032][T15139] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 920.424465][ T28] audit: type=1400 audit(1785415961.774:635): avc: denied { create } for pid=15138 comm="syz.6.5036" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 920.734811][T15153] loop9: detected capacity change from 0 to 40427 [ 920.763817][T15153] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 920.842172][T15153] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 920.852607][ T8] kworker/u4:0: attempt to access beyond end of device [ 920.852607][ T8] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 920.877575][T15153] F2FS-fs (loop9): Image doesn't support compression [ 920.909848][T15153] F2FS-fs (loop9): Image doesn't support compression [ 920.942194][T15153] F2FS-fs (loop9): invalid crc value [ 920.970246][T15153] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 921.108719][T15153] F2FS-fs (loop9): Start checkpoint disabled! [ 921.115223][T15153] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 921.132818][T15153] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 921.150660][T15153] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 921.204450][T15165] loop5: detected capacity change from 0 to 40427 [ 921.215198][T15165] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 921.222504][T15165] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 921.231294][T15165] F2FS-fs (loop5): Image doesn't support compression [ 921.238256][T15165] F2FS-fs (loop5): Image doesn't support compression [ 921.246254][T15165] F2FS-fs (loop5): invalid crc value [ 921.266500][T15165] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 921.420739][T15175] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 923.335340][T15165] F2FS-fs (loop5): Start checkpoint disabled! [ 923.353028][T15165] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 923.428633][ T2865] kworker/u4:9: attempt to access beyond end of device [ 923.428633][ T2865] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 923.450521][T15165] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 923.457680][T15165] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 923.714351][T15187] loop6: detected capacity change from 0 to 40427 [ 923.756676][T15187] F2FS-fs (loop6): invalid crc value [ 923.776202][T15187] F2FS-fs (loop6): Found nat_bits in checkpoint [ 924.130316][T15203] loop5: detected capacity change from 0 to 16 [ 924.152260][T15205] loop9: detected capacity change from 0 to 16 [ 924.161279][T15205] erofs: (device loop9): mounted with root inode @ nid 36. [ 924.169809][T15203] erofs: (device loop5): mounted with root inode @ nid 36. [ 924.465186][T15187] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 924.934483][ T28] audit: type=1400 audit(1785415966.002:636): avc: denied { read append open } for pid=15186 comm="syz.6.5049" path="/157/file0/blkio.bfq.io_merged_recursive" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 926.081758][T15241] loop5: detected capacity change from 0 to 16 [ 926.091182][T15241] erofs: (device loop5): mounted with root inode @ nid 36. [ 926.549285][T15232] loop9: detected capacity change from 0 to 40427 [ 926.731029][T15232] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 926.818767][T15232] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 927.431904][T15232] F2FS-fs (loop9): Image doesn't support compression [ 927.484859][T15232] F2FS-fs (loop9): Image doesn't support compression [ 927.506589][T15232] F2FS-fs (loop9): invalid crc value [ 927.536835][T15232] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 927.697539][T15232] F2FS-fs (loop9): Start checkpoint disabled! [ 927.704061][T15232] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 927.741836][T15232] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 928.090626][T15232] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 929.049651][T15269] overlayfs: failed to clone upperpath [ 929.107138][T15273] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 929.877635][T12938] syz-executor: attempt to access beyond end of device [ 929.877635][T12938] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 929.992843][ T10] kworker/u4:1: attempt to access beyond end of device [ 929.992843][ T10] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 930.159914][T15295] fuse: Unknown parameter 'grou00000000000000000000' [ 931.360177][T15298] loop6: detected capacity change from 0 to 16 [ 931.384818][T15298] erofs: (device loop6): mounted with root inode @ nid 36. [ 931.580396][T15301] loop5: detected capacity change from 0 to 128 [ 931.608365][T15301] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 931.633079][T15306] loop9: detected capacity change from 0 to 128 [ 931.647188][T15306] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 931.660034][T15306] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 931.669936][T15301] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 932.906120][T15332] loop9: detected capacity change from 0 to 4096 [ 932.926874][T15332] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 932.939028][T15332] EXT4-fs (loop9): Test dummy encryption mode enabled [ 932.966406][T15332] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 932.974586][T15332] System zones: 0-5 [ 933.005140][T15332] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 933.054907][T15332] fscrypt: AES-256-XTS using blk-crypto-fallback [ 933.097459][ T28] audit: type=1400 audit(1785415973.643:637): avc: denied { write } for pid=15331 comm="syz.9.5093" path=2F202864656C6574656429 dev="loop9" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 933.147888][ T28] audit: type=1400 audit(1785415973.643:638): avc: denied { rename } for pid=15331 comm="syz.9.5093" name="#56" dev="loop9" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 933.170351][ T28] audit: type=1400 audit(1785415973.652:639): avc: denied { unlink } for pid=15331 comm="syz.9.5093" name="#57" dev="loop9" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 933.191799][T12480] EXT4-fs (loop9): unmounting filesystem. [ 933.256333][T15337] SELinux: policydb string length 0 does not match expected length 8 [ 933.275543][T15337] SELinux: failed to load policy [ 934.909738][T15350] loop9: detected capacity change from 0 to 16 [ 934.919574][T15350] erofs: (device loop9): mounted with root inode @ nid 36. [ 935.039227][T15347] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 935.170664][T15357] fuse: Unknown parameter 'group_i00000000000000000000' [ 935.353789][T15366] loop9: detected capacity change from 0 to 16 [ 935.457865][T15366] erofs: (device loop9): mounted with root inode @ nid 36. [ 938.317954][T15379] loop6: detected capacity change from 0 to 40427 [ 938.338139][T15379] F2FS-fs (loop6): invalid crc value [ 938.385449][T15379] F2FS-fs (loop6): Found nat_bits in checkpoint [ 938.523885][T15379] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 939.280305][T15401] fuse: Unknown parameter 'group_i00000000000000000000' [ 940.584709][T15410] loop5: detected capacity change from 0 to 1024 [ 940.593140][T15410] EXT4-fs: dax option not supported [ 940.600583][T15410] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 941.980633][T15429] loop9: detected capacity change from 0 to 128 [ 942.012178][T15430] overlayfs: failed to clone upperpath [ 942.012404][T15429] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 942.068735][T15429] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 942.404891][T15436] fuse: Unknown parameter 'group_i00000000000000000000' [ 942.700297][T15442] loop5: detected capacity change from 0 to 1024 [ 942.708607][T15442] EXT4-fs: quotafile must be on filesystem root [ 943.684004][ T9143] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 944.102290][T15446] loop5: detected capacity change from 0 to 1024 [ 944.131177][T15446] EXT4-fs: dax option not supported [ 944.171713][ T9143] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 944.185967][T15446] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 944.295861][T12938] syz-executor: attempt to access beyond end of device [ 944.295861][T12938] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 944.647303][T15450] loop5: detected capacity change from 0 to 40427 [ 946.245031][T15450] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 946.301550][T15450] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 946.363759][T15450] F2FS-fs (loop5): Image doesn't support compression [ 946.370619][T15450] F2FS-fs (loop5): Image doesn't support compression [ 946.448846][T15450] F2FS-fs (loop5): invalid crc value [ 946.486672][T15450] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 946.555560][T15450] F2FS-fs (loop5): Start checkpoint disabled! [ 946.562164][T15450] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 946.632040][T15450] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 946.639386][T15450] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 947.088317][T15473] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 947.097999][T15473] SELinux: failed to load policy [ 947.786588][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5137'. [ 947.810194][T15486] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.820824][T15486] device bridge_slave_1 left promiscuous mode [ 947.826941][T15486] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.024373][T15489] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 948.386454][ T3280] kworker/u4:11: attempt to access beyond end of device [ 948.386454][ T3280] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 948.451124][T15500] loop6: detected capacity change from 0 to 128 [ 948.505933][T15500] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 948.576454][T15500] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 949.037827][T15514] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15514 comm=syz.5.5142 [ 949.146865][ T28] audit: type=1400 audit(1785415988.645:640): avc: denied { read write } for pid=15515 comm="syz.5.5149" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 949.178757][ T28] audit: type=1400 audit(1785415988.654:641): avc: denied { open } for pid=15515 comm="syz.5.5149" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 949.202777][ T28] audit: type=1400 audit(1785415988.654:642): avc: denied { ioctl } for pid=15515 comm="syz.5.5149" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 949.442385][T12094] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 949.677635][T12094] usb 6-1: Using ep0 maxpacket: 16 [ 949.683925][T12094] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.709664][T12094] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.719430][T12094] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 949.752451][T12094] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.761136][T12094] usb 6-1: config 0 descriptor?? [ 950.679082][T15520] loop5: detected capacity change from 0 to 512 [ 950.952362][T15520] EXT4-fs: Mount option(s) incompatible with ext2 [ 951.186867][T12094] wacom 0003:056A:0084.0010: unknown main item tag 0x6 [ 951.194783][T12094] wacom 0003:056A:0084.0010: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.5-1/input0 [ 951.223992][T15540] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 951.960691][T15565] loop6: detected capacity change from 0 to 256 [ 952.337195][T15568] loop9: detected capacity change from 0 to 40427 [ 952.352484][T15568] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 952.388286][T15568] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 952.422891][T15568] F2FS-fs (loop9): Image doesn't support compression [ 952.470621][T15568] F2FS-fs (loop9): Image doesn't support compression [ 952.497840][T15568] F2FS-fs (loop9): invalid crc value [ 952.510533][T15568] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 952.553834][ T5431] usb 6-1: reset high-speed USB device number 16 using dummy_hcd [ 952.592755][T15568] F2FS-fs (loop9): Start checkpoint disabled! [ 952.607604][T15568] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 952.651407][T15568] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 952.669345][T15568] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 952.772147][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5170'. [ 952.839938][T15586] device bridge_slave_1 left promiscuous mode [ 953.116017][T15586] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.580636][T12094] usb 6-1: USB disconnect, device number 16 [ 953.899956][T15598] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 953.930629][T15598] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 954.264485][T15602] loop5: detected capacity change from 0 to 1024 [ 954.272745][T15602] EXT4-fs: quotafile must be on filesystem root [ 954.998110][T15606] loop6: detected capacity change from 0 to 1024 [ 955.384396][ T9143] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 955.463848][T15606] EXT4-fs: dax option not supported [ 955.921787][ T7590] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 955.959988][T15606] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 964.607729][ T28] audit: type=1400 audit(1785416003.114:643): avc: denied { append } for pid=15639 comm="syz.5.5190" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 964.852698][T15653] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 964.950323][ T8] kworker/u4:0: attempt to access beyond end of device [ 964.950323][ T8] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 965.128521][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5199'. [ 965.194134][T15663] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.203996][T15663] device bridge_slave_1 left promiscuous mode [ 965.210106][T15663] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.593719][T15669] loop9: detected capacity change from 0 to 16 [ 965.712376][T15669] erofs: (device loop9): mounted with root inode @ nid 36. [ 966.460779][T15683] loop9: detected capacity change from 0 to 16 [ 966.468601][T15683] erofs: (device loop9): mounted with root inode @ nid 36. [ 967.234293][T15692] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 968.287485][T15705] loop9: detected capacity change from 0 to 40427 [ 968.303317][T15705] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 968.310603][T15705] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 968.329945][T15705] F2FS-fs (loop9): Image doesn't support compression [ 968.345854][T15705] F2FS-fs (loop9): Image doesn't support compression [ 968.364006][T15705] F2FS-fs (loop9): invalid crc value [ 968.375078][T15705] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 968.400478][T15711] loop6: detected capacity change from 0 to 40427 [ 968.411565][T15711] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 968.417932][T15711] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 968.446228][T15705] F2FS-fs (loop9): Start checkpoint disabled! [ 968.550445][T15705] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 968.561467][T15711] F2FS-fs (loop6): invalid crc value [ 968.669876][T15705] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 968.689206][T15705] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 968.755835][T15711] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 968.827757][T15711] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 968.834960][T15711] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 968.870328][T12938] syz-executor: attempt to access beyond end of device [ 968.870328][T12938] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 969.231833][ T645] kworker/u4:5: attempt to access beyond end of device [ 969.231833][ T645] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 969.254285][T15738] loop6: detected capacity change from 0 to 256 [ 970.277343][T15760] loop9: detected capacity change from 0 to 1024 [ 970.285786][T15760] EXT4-fs: quotafile must be on filesystem root [ 971.990781][T15767] loop9: detected capacity change from 0 to 40427 [ 972.005483][T15767] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 972.021008][T15767] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 972.029559][T15767] F2FS-fs (loop9): Image doesn't support compression [ 972.036433][T15767] F2FS-fs (loop9): Image doesn't support compression [ 972.043700][T15767] F2FS-fs (loop9): invalid crc value [ 972.051159][T15767] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 972.095508][T15767] F2FS-fs (loop9): Start checkpoint disabled! [ 972.102232][T15767] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 972.110170][T15767] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 972.117422][T15767] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 972.219634][T15787] loop6: detected capacity change from 0 to 1024 [ 972.366959][ T28] audit: type=1400 audit(1785416010.371:644): avc: denied { write } for pid=15791 comm="syz.6.5240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 972.367147][T15793] netlink: 388 bytes leftover after parsing attributes in process `syz.6.5240'. [ 972.394837][ T28] audit: type=1400 audit(1785416010.371:645): avc: denied { nlmsg_write } for pid=15791 comm="syz.6.5240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 972.684234][ T2359] kworker/u4:8: attempt to access beyond end of device [ 972.684234][ T2359] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 973.463199][T15812] netlink: 388 bytes leftover after parsing attributes in process `syz.9.5246'. [ 973.656322][T15821] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 973.666041][T15821] SELinux: failed to load policy [ 974.113010][T15832] loop9: detected capacity change from 0 to 256 [ 974.162215][T12094] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 974.365377][T12094] usb 6-1: Using ep0 maxpacket: 32 [ 974.371820][T12094] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 974.395817][T12094] usb 6-1: config 0 has no interface number 0 [ 974.416547][T12094] usb 6-1: config 0 interface 184 has no altsetting 0 [ 974.440349][T12094] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 974.467490][T12094] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.492424][T12094] usb 6-1: Product: syz [ 974.506455][T12094] usb 6-1: Manufacturer: syz [ 974.520177][T12094] usb 6-1: SerialNumber: syz [ 974.544471][T12094] usb 6-1: config 0 descriptor?? [ 974.557082][T12094] smsc75xx v1.0.0 [ 975.798655][T12094] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 975.819561][T12094] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 975.840153][T12094] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 975.861889][T12094] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 975.975352][T12094] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 975.997776][T12094] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 976.046751][T12094] smsc75xx: probe of 6-1:0.184 failed with error -61 [ 976.088721][T12094] usb 6-1: USB disconnect, device number 17 [ 976.102401][T15860] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 976.142712][T15860] SELinux: failed to load policy [ 976.158203][T15862] overlayfs: failed to clone upperpath [ 976.551671][T15873] loop6: detected capacity change from 0 to 40427 [ 976.561491][T15873] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 976.589428][T15873] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 976.616278][T15873] F2FS-fs (loop6): Image doesn't support compression [ 976.633274][T15873] F2FS-fs (loop6): Image doesn't support compression [ 976.654100][T15873] F2FS-fs (loop6): invalid crc value [ 976.667935][T15873] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 976.698841][T15880] loop9: detected capacity change from 0 to 40427 [ 976.714548][T15880] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 976.730195][T15880] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 976.818399][T15873] F2FS-fs (loop6): Start checkpoint disabled! [ 976.831537][T15873] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 976.858868][T15873] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 976.867181][T15880] F2FS-fs (loop9): Image doesn't support compression [ 976.878042][T15873] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 976.889038][T15880] F2FS-fs (loop9): Image doesn't support compression [ 976.916388][T15880] F2FS-fs (loop9): invalid crc value [ 976.945595][T15880] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 976.971896][T15890] loop5: detected capacity change from 0 to 512 [ 977.023687][T15890] EXT4-fs (loop5): Test dummy encryption mode enabled [ 977.031750][T15880] F2FS-fs (loop9): Start checkpoint disabled! [ 977.039298][T15880] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 977.047117][T15880] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 977.054396][T15880] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 977.082054][T15890] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.5274: inode has both inline data and extents flags [ 977.095542][T15890] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.5274: couldn't read orphan inode 15 (err -117) [ 977.107818][T15890] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 977.170161][T10170] EXT4-fs (loop5): unmounting filesystem. [ 978.639516][T15904] overlayfs: failed to clone upperpath [ 980.245018][T15916] loop5: detected capacity change from 0 to 256 [ 981.849100][ T3492] kworker/u4:12: attempt to access beyond end of device [ 981.849100][ T3492] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 981.863756][ T2359] kworker/u4:8: attempt to access beyond end of device [ 981.863756][ T2359] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 982.273522][T15926] loop6: detected capacity change from 0 to 1024 [ 982.280768][T15926] EXT4-fs: dax option not supported [ 982.288280][T15926] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 982.359566][T15931] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 982.380274][T15931] SELinux: failed to load policy [ 982.835271][T15924] loop5: detected capacity change from 0 to 40427 [ 982.857658][T15924] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 982.880899][T15924] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 982.914179][T15924] F2FS-fs (loop5): Image doesn't support compression [ 982.943707][T15924] F2FS-fs (loop5): Image doesn't support compression [ 982.967520][T15924] F2FS-fs (loop5): invalid crc value [ 982.988911][T15924] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 983.086449][T15924] F2FS-fs (loop5): Start checkpoint disabled! [ 983.103318][T15924] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 983.128457][T15924] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 983.141130][T15924] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 985.993577][T15966] loop6: detected capacity change from 0 to 1024 [ 986.000595][T15966] EXT4-fs: dax option not supported [ 986.136469][ T10] kworker/u4:1: attempt to access beyond end of device [ 986.136469][ T10] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 986.153915][T15646] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 986.167138][T15966] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 986.500772][ T1417] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 986.649656][T15980] loop6: detected capacity change from 0 to 128 [ 986.682719][T15980] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 986.704982][ T1417] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.722636][ T1417] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.733718][T15980] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 986.752693][ T1417] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 986.790948][ T1417] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 986.810026][ T1417] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.831422][ T1417] usb 10-1: config 0 descriptor?? [ 987.319619][ T1417] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 987.337208][ T1417] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 987.511958][T15978] loop5: detected capacity change from 0 to 131072 [ 987.523746][T15978] F2FS-fs (loop5): Test dummy encryption mode enabled [ 987.532218][T15978] F2FS-fs (loop5): invalid crc value [ 987.567811][T15978] F2FS-fs (loop5): Found nat_bits in checkpoint [ 987.596861][ T1417] usb 10-1: USB disconnect, device number 7 [ 987.896070][T15978] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 988.053291][ T28] audit: type=1400 audit(1785416025.046:646): avc: denied { ioctl } for pid=15977 comm="syz.5.5300" path="/385/file0/file0" dev="loop5" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 988.586771][T16008] loop9: detected capacity change from 0 to 40427 [ 988.597409][T16008] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 988.611889][T16008] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 988.620387][T16008] F2FS-fs (loop9): Image doesn't support compression [ 988.627140][T16008] F2FS-fs (loop9): Image doesn't support compression [ 988.634853][T16008] F2FS-fs (loop9): invalid crc value [ 988.702212][T16008] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 988.750975][T16008] F2FS-fs (loop9): Start checkpoint disabled! [ 988.757552][T16008] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 988.765293][T16008] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 988.772657][T16008] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 989.081583][T16027] fuse: Invalid rootmode [ 991.813262][T16034] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5317'. [ 991.822459][T16034] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5317'. [ 991.837262][T16034] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5317'. [ 992.060824][ T645] kworker/u4:5: attempt to access beyond end of device [ 992.060824][ T645] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 992.174531][ T468] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 992.607683][ T468] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.634972][ T468] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.707645][ T468] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 992.728655][ T468] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 992.742971][ T468] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.794707][ T468] usb 6-1: config 0 descriptor?? [ 993.264498][ T468] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 993.280453][ T468] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 993.655111][ T555] usb 6-1: USB disconnect, device number 18 [ 995.931534][T16112] loop5: detected capacity change from 0 to 256 [ 999.913481][T16126] kvm: pic: level sensitive irq not supported [ 999.913929][T16126] kvm: pic: single mode not supported [ 999.920203][T16126] kvm: pic: level sensitive irq not supported [ 999.945367][T16132] loop5: detected capacity change from 0 to 16 [ 999.958707][T16132] erofs: (device loop5): mounted with root inode @ nid 36. [ 1000.343644][T16150] overlayfs: failed to resolve './file0': -2 [ 1000.564164][T16154] loop9: detected capacity change from 0 to 128 [ 1000.592415][T16154] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1000.617078][T16154] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1001.834931][T16160] loop5: detected capacity change from 0 to 40427 [ 1002.148181][T16160] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1002.288553][T16160] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1002.303500][T16160] F2FS-fs (loop5): Image doesn't support compression [ 1002.318515][T16160] F2FS-fs (loop5): Image doesn't support compression [ 1002.425265][T16160] F2FS-fs (loop5): invalid crc value [ 1002.432754][T16160] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1002.466092][T16160] F2FS-fs (loop5): Start checkpoint disabled! [ 1002.472560][T16160] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1002.571683][T16160] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1002.578802][T16160] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1003.421032][T16194] fuse: Unknown parameter 'use00000000000000000000' [ 1003.555819][T16202] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16202 comm=syz.2.5374 [ 1003.726959][T16208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5377'. [ 1003.902698][ T3492] kworker/u4:12: attempt to access beyond end of device [ 1003.902698][ T3492] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1003.974740][T12094] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1004.010151][T16223] fuse: Unknown parameter 'use00000000000000000000' [ 1004.103270][T16232] overlayfs: missing 'lowerdir' [ 1004.185235][T12094] usb 10-1: Using ep0 maxpacket: 16 [ 1004.194609][T12094] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1004.205877][T12094] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.215907][T12094] usb 10-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1004.225257][T12094] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.239792][T12094] usb 10-1: config 0 descriptor?? [ 1004.676233][T12094] wacom 0003:056A:0084.0013: unknown main item tag 0x6 [ 1004.684244][T12094] wacom 0003:056A:0084.0013: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.9-1/input0 [ 1004.896827][T16179] loop9: detected capacity change from 0 to 512 [ 1004.906816][T16179] EXT4-fs: Mount option(s) incompatible with ext2 [ 1004.942204][T16255] fuse: Unknown parameter 'use00000000000000000000' [ 1005.093696][ T39] usb 10-1: USB disconnect, device number 8 [ 1005.470117][T16271] loop5: detected capacity change from 0 to 40427 [ 1005.487103][T16271] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1005.494668][T16271] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1005.503595][T16271] F2FS-fs (loop5): Image doesn't support compression [ 1005.510372][T16271] F2FS-fs (loop5): Image doesn't support compression [ 1005.524877][T16271] F2FS-fs (loop5): invalid crc value [ 1005.537665][T16271] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1005.618380][T16271] F2FS-fs (loop5): Start checkpoint disabled! [ 1005.624998][T16271] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1005.632966][T16271] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1005.642655][T16271] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1006.374388][ T2359] kworker/u4:8: attempt to access beyond end of device [ 1006.374388][ T2359] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1006.455457][T16290] fuse: Unknown parameter 'user_i00000000000000000000' [ 1006.574750][T16303] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1006.583557][T16303] overlayfs: missing 'lowerdir' [ 1006.604428][T16305] loop9: detected capacity change from 0 to 512 [ 1007.570483][T15646] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1008.039799][T16316] loop5: detected capacity change from 0 to 40427 [ 1008.064278][T16316] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1008.087942][T16316] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1008.096460][T16316] F2FS-fs (loop5): Image doesn't support compression [ 1008.111286][T16316] F2FS-fs (loop5): Image doesn't support compression [ 1008.122633][T16316] F2FS-fs (loop5): invalid crc value [ 1008.141632][T16316] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1008.237142][T16316] F2FS-fs (loop5): Start checkpoint disabled! [ 1008.259387][T16316] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1008.288445][T16316] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1008.295588][T16316] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1008.308110][T16319] loop6: detected capacity change from 0 to 40427 [ 1008.343072][T16319] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 1008.350921][T16319] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1008.360169][T16319] F2FS-fs (loop6): Image doesn't support compression [ 1008.366939][T16319] F2FS-fs (loop6): Image doesn't support compression [ 1008.432153][T16319] F2FS-fs (loop6): invalid crc value [ 1009.470780][T16319] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1009.536059][T16319] F2FS-fs (loop6): Start checkpoint disabled! [ 1009.550928][T16319] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1009.581291][T16319] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1009.590038][T16319] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1009.704962][ T2359] kworker/u4:8: attempt to access beyond end of device [ 1009.704962][ T2359] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1009.899431][ T3280] kworker/u4:11: attempt to access beyond end of device [ 1009.899431][ T3280] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1010.183917][T16363] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1010.203453][T16363] overlayfs: missing 'lowerdir' [ 1010.264129][T16367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5430'. [ 1010.275200][T16367] device bridge_slave_1 left promiscuous mode [ 1010.281413][T16367] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.320349][T16381] loop5: detected capacity change from 0 to 40427 [ 1012.402908][T16381] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1012.428708][T16381] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1012.458645][T16381] F2FS-fs (loop5): Image doesn't support compression [ 1012.469387][T16381] F2FS-fs (loop5): Image doesn't support compression [ 1012.482604][T16381] F2FS-fs (loop5): invalid crc value [ 1012.501043][T16381] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1012.567442][T16381] F2FS-fs (loop5): Start checkpoint disabled! [ 1012.577395][T16381] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1012.609079][T16381] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1012.626986][T16381] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1012.959446][ T1415] kworker/u4:7: attempt to access beyond end of device [ 1012.959446][ T1415] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1013.312958][T16407] loop5: detected capacity change from 0 to 1024 [ 1013.321837][T16407] EXT4-fs: dax option not supported [ 1013.346970][T16407] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 1013.946672][T16411] loop5: detected capacity change from 0 to 40427 [ 1014.078312][T16411] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1014.085619][T16411] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1014.109269][T16411] F2FS-fs (loop5): Image doesn't support compression [ 1014.143833][T16411] F2FS-fs (loop5): Image doesn't support compression [ 1014.174055][T16411] F2FS-fs (loop5): invalid crc value [ 1014.229321][T16411] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1014.306610][T16411] F2FS-fs (loop5): Start checkpoint disabled! [ 1014.319927][T16411] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1014.342886][T16411] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1014.359171][T16411] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1014.582921][T16430] loop9: detected capacity change from 0 to 40427 [ 1014.606169][T16430] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 1014.654654][T16430] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1014.662936][T16430] F2FS-fs (loop9): Image doesn't support compression [ 1014.713153][T16430] F2FS-fs (loop9): Image doesn't support compression [ 1014.802447][T16430] F2FS-fs (loop9): invalid crc value [ 1014.814199][T16430] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1014.847549][T16430] F2FS-fs (loop9): Start checkpoint disabled! [ 1014.854103][T16430] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 1014.877091][T16430] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1014.895293][T16430] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1014.919450][ T8] kworker/u4:0: attempt to access beyond end of device [ 1014.919450][ T8] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1014.989532][T16445] loop6: detected capacity change from 0 to 16 [ 1014.997596][T16445] erofs: (device loop6): mounted with root inode @ nid 36. [ 1015.287869][T16458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5457'. [ 1015.424158][ T645] kworker/u4:5: attempt to access beyond end of device [ 1015.424158][ T645] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1016.063009][T16479] loop6: detected capacity change from 0 to 1024 [ 1016.070084][T16479] EXT4-fs: quotafile must be on filesystem root [ 1016.110808][T15646] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1016.564642][T16486] fuse: Bad value for 'fd' [ 1016.857561][T16493] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1016.989497][T16488] loop5: detected capacity change from 0 to 40427 [ 1017.012208][T16488] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1017.035429][T16488] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1017.052739][T16488] F2FS-fs (loop5): Image doesn't support compression [ 1017.067621][T16488] F2FS-fs (loop5): Image doesn't support compression [ 1017.082921][T16488] F2FS-fs (loop5): invalid crc value [ 1017.096015][T16488] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1017.163941][T16488] F2FS-fs (loop5): Start checkpoint disabled! [ 1017.177330][T16488] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1017.189811][T16495] loop9: detected capacity change from 0 to 40427 [ 1017.205035][T16495] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 1017.221474][T16495] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1017.230285][T16488] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1017.237417][T16488] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1017.245318][T16495] F2FS-fs (loop9): Image doesn't support compression [ 1017.298864][T16495] F2FS-fs (loop9): Image doesn't support compression [ 1017.321724][T16495] F2FS-fs (loop9): invalid crc value [ 1017.357199][T16495] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1017.405314][T16495] F2FS-fs (loop9): Start checkpoint disabled! [ 1017.412620][T16495] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 1017.420325][T16495] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1017.427782][T16495] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1017.650324][ T1415] kworker/u4:7: attempt to access beyond end of device [ 1017.650324][ T1415] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1018.032170][ T1415] kworker/u4:7: attempt to access beyond end of device [ 1018.032170][ T1415] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1019.473725][T16550] loop6: detected capacity change from 0 to 16 [ 1019.482800][T16550] erofs: (device loop6): mounted with root inode @ nid 36. [ 1020.422270][T16563] program syz.5.5487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1021.591053][T16587] netlink: 388 bytes leftover after parsing attributes in process `syz.8.5496'. [ 1021.660096][T16592] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1021.685949][T16578] loop9: detected capacity change from 0 to 40427 [ 1021.701078][T16578] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 1021.716878][T16578] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1021.736175][T16578] F2FS-fs (loop9): Image doesn't support compression [ 1021.749714][T16578] F2FS-fs (loop9): Image doesn't support compression [ 1021.767315][T16578] F2FS-fs (loop9): invalid crc value [ 1021.779877][T16578] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1021.834201][T16578] F2FS-fs (loop9): Start checkpoint disabled! [ 1021.842424][T16599] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16599 comm=syz.5.5501 [ 1021.892936][T16578] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 1021.915654][T16578] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1021.922743][T16578] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1022.034736][T16609] overlayfs: failed to resolve './file0': -2 [ 1022.238331][T16607] xt_hashlimit: size too large, truncated to 1048576 [ 1023.366222][ T1415] kworker/u4:7: attempt to access beyond end of device [ 1023.366222][ T1415] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1023.413032][T16617] loop6: detected capacity change from 0 to 40427 [ 1023.421515][T16617] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 1023.428756][T16617] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1023.443246][T16617] F2FS-fs (loop6): Image doesn't support compression [ 1023.449972][T16617] F2FS-fs (loop6): Image doesn't support compression [ 1023.457164][T16617] F2FS-fs (loop6): invalid crc value [ 1023.475212][T16617] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1023.559082][T16617] F2FS-fs (loop6): Start checkpoint disabled! [ 1023.582037][T16617] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1023.602483][T16617] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1023.609567][T16617] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1024.016684][T16643] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16643 comm=syz.2.5514 [ 1024.068070][ T1415] kworker/u4:7: attempt to access beyond end of device [ 1024.068070][ T1415] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1024.254162][T16649] overlayfs: failed to clone upperpath [ 1025.138918][T16671] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1025.239030][T16665] loop5: detected capacity change from 0 to 40427 [ 1025.255552][T16665] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1025.274332][T16665] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1025.286960][T16665] F2FS-fs (loop5): Image doesn't support compression [ 1025.345870][T16665] F2FS-fs (loop5): Image doesn't support compression [ 1025.655941][T16665] F2FS-fs (loop5): invalid crc value [ 1025.775704][T16665] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1025.878306][T16665] F2FS-fs (loop5): Start checkpoint disabled! [ 1025.884975][T16665] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1025.894078][T16665] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1025.901419][T16665] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1026.254288][T16686] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16686 comm=syz.9.5526 [ 1026.326363][ T1415] kworker/u4:7: attempt to access beyond end of device [ 1026.326363][ T1415] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1026.742424][T16713] loop5: detected capacity change from 0 to 256 [ 1026.857184][T16718] overlayfs: failed to resolve './file0': -2 [ 1027.194979][T16727] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5538'. [ 1027.204629][T16727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16727 comm=syz.8.5538 [ 1028.249067][T16758] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5549'. [ 1028.269753][T16758] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16758 comm=syz.8.5549 [ 1028.297674][T16750] loop9: detected capacity change from 0 to 40427 [ 1028.319944][T16750] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 1028.327356][T16750] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1028.336048][T16750] F2FS-fs (loop9): Image doesn't support compression [ 1028.343459][T16750] F2FS-fs (loop9): Image doesn't support compression [ 1028.350824][T16750] F2FS-fs (loop9): invalid crc value [ 1028.357432][T16750] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1028.398873][T16762] xt_hashlimit: size too large, truncated to 1048576 [ 1028.406219][T16750] F2FS-fs (loop9): Start checkpoint disabled! [ 1028.422101][T16750] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 1028.448367][T16750] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1028.474152][T16750] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1028.556000][T16765] overlayfs: failed to resolve './file0': -2 [ 1029.164718][ T28] audit: type=1400 audit(1785416063.496:647): avc: denied { create } for pid=16772 comm="syz.5.5553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1029.480337][T16782] fuse: Unknown parameter '0x0000000000000003' [ 1029.504721][T16787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5560'. [ 1029.514402][T16787] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16787 comm=syz.2.5560 [ 1029.620559][ T645] kworker/u4:5: attempt to access beyond end of device [ 1029.620559][ T645] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1030.524728][T16814] program syz.6.5566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1030.613101][T16820] fuse: Unknown parameter 'fd0x0000000000000003' [ 1031.379856][T16836] loop9: detected capacity change from 0 to 40427 [ 1031.390641][T16836] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 1031.398554][T16836] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1031.407799][T16836] F2FS-fs (loop9): Image doesn't support compression [ 1031.414982][T16836] F2FS-fs (loop9): Image doesn't support compression [ 1031.425097][T16836] F2FS-fs (loop9): invalid crc value [ 1031.432245][T16836] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1031.468797][T16836] F2FS-fs (loop9): Start checkpoint disabled! [ 1031.475745][T16836] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 1031.483396][T16836] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1031.490522][T16836] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1031.677820][T16848] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5580'. [ 1031.790475][T16855] fuse: Unknown parameter 'fd0x0000000000000003' [ 1032.757788][T16889] fuse: Unknown parameter 'fd0x0000000000000003' [ 1032.796017][ T10] kworker/u4:1: attempt to access beyond end of device [ 1032.796017][ T10] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1033.175330][T16912] loop9: detected capacity change from 0 to 128 [ 1033.184579][T16912] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1033.223344][T16912] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1035.561016][T16972] loop6: detected capacity change from 0 to 16 [ 1035.619989][T16972] erofs: (device loop6): mounted with root inode @ nid 36. [ 1036.434441][T16989] loop6: detected capacity change from 0 to 128 [ 1036.493247][T16989] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1036.517680][T16989] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1037.291031][T17020] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5637'. [ 1037.300648][T17020] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17020 comm=syz.8.5637 [ 1038.841647][T17056] netlink: 172 bytes leftover after parsing attributes in process `syz.8.5649'. [ 1039.028239][T17066] overlayfs: failed to resolve './file1': -2 [ 1039.667809][T17090] loop5: detected capacity change from 0 to 256 [ 1039.993325][T17096] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5663'. [ 1041.227546][T17120] loop5: detected capacity change from 0 to 1024 [ 1041.531383][T17120] EXT4-fs: dax option not supported [ 1041.804635][T17129] overlayfs: failed to resolve './file1': -2 [ 1042.272533][T17149] program syz.9.5685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1042.598722][T17145] loop6: detected capacity change from 0 to 40427 [ 1042.616811][T17145] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 1042.625729][T17145] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1042.634161][T17145] F2FS-fs (loop6): Image doesn't support compression [ 1042.640966][T17145] F2FS-fs (loop6): Image doesn't support compression [ 1042.652314][T17145] F2FS-fs (loop6): invalid crc value [ 1042.729996][T17145] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1042.771049][T17145] F2FS-fs (loop6): Start checkpoint disabled! [ 1042.782737][T17145] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1042.965501][T17145] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1042.978024][T17145] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1044.091760][ T645] kworker/u4:5: attempt to access beyond end of device [ 1044.091760][ T645] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1045.146798][T17218] loop5: detected capacity change from 0 to 256 [ 1045.246133][T17219] loop9: detected capacity change from 0 to 1024 [ 1045.566971][T17219] EXT4-fs: dax option not supported [ 1046.623691][T17236] loop9: detected capacity change from 0 to 40427 [ 1046.656636][T17236] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 1046.674882][T17236] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1046.683567][T17236] F2FS-fs (loop9): Image doesn't support compression [ 1046.691754][T17236] F2FS-fs (loop9): Image doesn't support compression [ 1046.699361][T17236] F2FS-fs (loop9): invalid crc value [ 1046.705518][T17236] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1046.779808][T17236] F2FS-fs (loop9): Start checkpoint disabled! [ 1046.824718][T17236] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 1046.838331][T17236] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1046.850668][T17236] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1047.049411][ T1415] kworker/u4:7: attempt to access beyond end of device [ 1047.049411][ T1415] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1047.633345][T17277] loop5: detected capacity change from 0 to 256 [ 1047.966963][T17285] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5726'. [ 1048.011500][T17285] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5726'. [ 1048.041990][T17285] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5726'. [ 1048.825191][T17299] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1050.911814][T17333] loop6: detected capacity change from 0 to 40427 [ 1050.918841][T17333] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 1050.926734][T17333] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1050.935182][T17333] F2FS-fs (loop6): Image doesn't support compression [ 1050.942189][T17333] F2FS-fs (loop6): Image doesn't support compression [ 1050.949521][T17333] F2FS-fs (loop6): invalid crc value [ 1050.955664][T17333] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1050.985458][T17333] F2FS-fs (loop6): Start checkpoint disabled! [ 1050.991961][T17333] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1050.999662][T17333] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1051.007083][T17333] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1051.187086][ T39] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1051.390455][ T39] usb 10-1: Using ep0 maxpacket: 16 [ 1051.397401][ T39] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.462883][ T39] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1051.493650][ T39] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1051.537171][ T39] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.549767][ T39] usb 10-1: Product: syz [ 1051.557075][ T39] usb 10-1: Manufacturer: syz [ 1051.566605][ T39] usb 10-1: SerialNumber: syz [ 1052.804363][ T39] usb 10-1: 0:2 : does not exist [ 1052.814277][ T39] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1052.840271][ T39] usb 10-1: USB disconnect, device number 9 [ 1053.043066][T17351] loop5: detected capacity change from 0 to 40427 [ 1053.152922][T17351] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1053.172108][T17351] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1053.185997][T17351] F2FS-fs (loop5): Image doesn't support compression [ 1053.210750][T17351] F2FS-fs (loop5): Image doesn't support compression [ 1053.223163][T17351] F2FS-fs (loop5): invalid crc value [ 1053.229361][T17351] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1053.400699][ T2359] kworker/u4:8: attempt to access beyond end of device [ 1053.400699][ T2359] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1053.640704][T17351] F2FS-fs (loop5): Start checkpoint disabled! [ 1053.648886][T17351] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1053.661810][T17351] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1053.674205][T17351] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1053.983956][T17387] loop9: detected capacity change from 0 to 40427 [ 1054.000017][T17387] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 1054.022870][T17387] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1054.031679][T17387] F2FS-fs (loop9): Image doesn't support compression [ 1054.038453][T17387] F2FS-fs (loop9): Image doesn't support compression [ 1054.046557][T17387] F2FS-fs (loop9): invalid crc value [ 1054.052821][T17387] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1054.093859][T17387] F2FS-fs (loop9): Start checkpoint disabled! [ 1054.100517][T17387] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 1054.108290][T17387] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1054.115435][T17387] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1054.371936][T17397] using random self ethernet address [ 1054.378677][T17397] using random host ethernet address [ 1054.474831][ T8] kworker/u4:0: attempt to access beyond end of device [ 1054.474831][ T8] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1056.424351][T17430] loop5: detected capacity change from 0 to 40427 [ 1056.435602][T17430] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1056.449444][T17430] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1056.466479][T17430] F2FS-fs (loop5): Image doesn't support compression [ 1056.479803][T17430] F2FS-fs (loop5): Image doesn't support compression [ 1056.496470][T17430] F2FS-fs (loop5): invalid crc value [ 1056.508756][T17430] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1056.598257][T17430] F2FS-fs (loop5): Start checkpoint disabled! [ 1056.604716][T17430] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1056.614678][ T2359] kworker/u4:8: attempt to access beyond end of device [ 1056.614678][ T2359] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1056.638660][T17430] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1056.647960][T17430] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1057.347525][T17447] usb0: HOST MAC 1a:79:d8:2f:86:bb [ 1057.364120][T17447] usb0: MAC 1a:4d:25:7f:29:ae [ 1057.424978][ T28] audit: type=1400 audit(1785416089.842:648): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.476601][ T468] android_work: did not send uevent (0 0 0000000000000000) [ 1057.535928][ T28] audit: type=1400 audit(1785416089.842:649): avc: denied { read } for pid=142 comm="dhcpcd" name="n16" dev="tmpfs" ino=38068 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1057.576188][T17457] loop6: detected capacity change from 0 to 1024 [ 1057.617925][T17457] EXT4-fs: dax option not supported [ 1057.657745][ T28] audit: type=1400 audit(1785416089.842:650): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=38068 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1057.686436][ T28] audit: type=1400 audit(1785416089.842:651): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=38068 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1057.712429][ T28] audit: type=1400 audit(1785416090.058:652): avc: denied { read } for pid=17459 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.729536][T17457] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 1057.756238][ T28] audit: type=1400 audit(1785416090.058:653): avc: denied { open } for pid=17459 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.781269][ T28] audit: type=1400 audit(1785416090.058:654): avc: denied { getattr } for pid=17459 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.878823][ T28] audit: type=1400 audit(1785416090.348:655): avc: denied { write } for pid=17453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.901912][ T28] audit: type=1400 audit(1785416090.348:656): avc: denied { add_name } for pid=17453 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1057.904743][ T2359] kworker/u4:8: attempt to access beyond end of device [ 1057.904743][ T2359] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1057.925516][ T28] audit: type=1400 audit(1785416090.348:657): avc: denied { create } for pid=17453 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1057.955184][ T468] android_work: did not send uevent (0 0 0000000000000000) [ 1058.008820][T17481] overlayfs: failed to clone upperpath [ 1058.815014][T17507] loop6: detected capacity change from 0 to 16 [ 1058.834928][T17507] erofs: (device loop6): mounted with root inode @ nid 36. [ 1059.351950][T17519] loop9: detected capacity change from 0 to 40427 [ 1059.364087][T17519] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 1059.372086][T17519] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1059.380741][T17519] F2FS-fs (loop9): Image doesn't support compression [ 1059.387903][T17519] F2FS-fs (loop9): Image doesn't support compression [ 1059.403886][T17519] F2FS-fs (loop9): invalid crc value [ 1059.411580][T17519] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1059.446050][T17519] F2FS-fs (loop9): Start checkpoint disabled! [ 1059.453994][T17519] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 1059.461651][T17519] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1059.469030][T17519] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1059.515660][T17522] loop5: detected capacity change from 0 to 1024 [ 1059.545349][T17522] EXT4-fs: dax option not supported [ 1059.596047][T17522] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 1060.835565][ T1415] kworker/u4:7: attempt to access beyond end of device [ 1060.835565][ T1415] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1062.034488][T17546] overlayfs: failed to clone upperpath [ 1062.127623][ T468] android_work: did not send uevent (0 0 0000000000000000) [ 1062.225374][T17560] loop6: detected capacity change from 0 to 1024 [ 1062.246505][T17560] EXT4-fs: dax option not supported [ 1062.336493][T17560] xhci-hcd i8042: error -ENXIO: IRQ index 0 not found [ 1062.526451][T17556] loop5: detected capacity change from 0 to 40427 [ 1062.547342][T17556] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1062.562406][T17556] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1062.580698][T17556] F2FS-fs (loop5): Image doesn't support compression [ 1062.595872][T17556] F2FS-fs (loop5): Image doesn't support compression [ 1062.605930][T17556] F2FS-fs (loop5): invalid crc value [ 1062.614185][ T468] android_work: did not send uevent (0 0 0000000000000000) [ 1062.622508][T17556] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1062.676158][T17556] F2FS-fs (loop5): Start checkpoint disabled! [ 1062.682737][T17556] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1062.690285][T17556] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1062.698452][T17556] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1062.794647][ T468] android_work: did not send uevent (0 0 0000000000000000) [ 1062.903218][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1062.903235][ T28] audit: type=1400 audit(1785416095.043:662): avc: denied { write } for pid=17583 comm="syz.8.5817" name="instances" dev="tracefs" ino=12972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1062.939527][ T555] android_work: did not send uevent (0 0 0000000000000000) [ 1063.715710][ T28] audit: type=1400 audit(1785416095.043:663): avc: denied { add_name } for pid=17583 comm="syz.8.5817" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1063.789581][T17594] overlayfs: failed to clone upperpath [ 1063.817884][ T28] audit: type=1400 audit(1785416095.043:664): avc: denied { create } for pid=17583 comm="syz.8.5817" name="inst1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 1063.865701][ T28] audit: type=1400 audit(1785416095.529:665): avc: denied { read } for pid=17590 comm="syz.9.5818" name="idVendor" dev="configfs" ino=121162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1064.007648][ T1415] kworker/u4:7: attempt to access beyond end of device [ 1064.007648][ T1415] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1064.078866][T17575] loop6: detected capacity change from 0 to 40427 [ 1064.094646][T17575] F2FS-fs (loop6): Corrupted extension count (64 + 1 > 64) [ 1064.101924][T17575] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1064.110361][T17575] F2FS-fs (loop6): Image doesn't support compression [ 1064.118049][T17575] F2FS-fs (loop6): Image doesn't support compression [ 1064.134979][T17575] F2FS-fs (loop6): invalid crc value [ 1064.144807][T17575] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1064.208570][T17575] F2FS-fs (loop6): Start checkpoint disabled! [ 1064.224583][T17575] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 1064.236595][T17575] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1064.244167][T17575] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1065.133373][T17622] loop9: detected capacity change from 0 to 40427 [ 1065.147920][T17622] F2FS-fs (loop9): Corrupted extension count (64 + 1 > 64) [ 1065.163250][T17622] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1065.171565][T17622] F2FS-fs (loop9): Image doesn't support compression [ 1065.179649][T17622] F2FS-fs (loop9): Image doesn't support compression [ 1065.191943][T17622] F2FS-fs (loop9): invalid crc value [ 1065.199136][T17622] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1065.208732][T17618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.231563][T17618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.247974][T17622] F2FS-fs (loop9): Start checkpoint disabled! [ 1065.254459][T17622] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 1065.262439][T17618] device bridge_slave_0 entered promiscuous mode [ 1065.271119][T17618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.278166][T17618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.287054][T17618] device bridge_slave_1 entered promiscuous mode [ 1065.304430][T17622] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1065.313047][ T1415] kworker/u4:7: attempt to access beyond end of device [ 1065.313047][ T1415] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1065.313403][T17622] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1067.538151][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1067.546988][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1067.561448][T17647] dwc3 dwc3.1.auto: can't request region for resource [mem 0x0000c100-0x00000000] [ 1067.582555][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1067.599168][T17647] dwc3: probe of dwc3.1.auto failed with error -16 [ 1067.606129][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1067.617867][ T39] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1067.626149][ T468] android_work: sent uevent USB_STATE=CONNECTED [ 1067.632699][ T2359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.639744][ T2359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1067.647254][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1067.655655][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1067.663927][ T2359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.670963][ T2359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.678430][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1067.714524][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1067.723738][ T1415] kworker/u4:7: attempt to access beyond end of device [ 1067.723738][ T1415] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1067.734480][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1067.766888][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1067.777938][T17634] loop5: detected capacity change from 0 to 40427 [ 1067.795173][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1067.808618][T17634] F2FS-fs (loop5): Corrupted extension count (64 + 1 > 64) [ 1067.811560][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1067.823813][T17634] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1067.836205][ T39] usb 1-1: Dual-Role OTG device on HNP port [ 1067.843028][ T39] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 6.01 [ 1067.861918][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.867406][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1067.871510][T17634] F2FS-fs (loop5): Image doesn't support compression [ 1067.885402][T17618] device veth0_vlan entered promiscuous mode [ 1067.892596][ T39] usb 1-1: Product: Test Gadget [ 1067.898676][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1067.903081][ T39] usb 1-1: Manufacturer: Linux Foundation [ 1067.909084][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1067.914467][T17634] F2FS-fs (loop5): Image doesn't support compression [ 1067.937603][ T39] usb 1-1: SerialNumber: 1234567890 [ 1067.949761][ C1] configfs-gadget.g1 gadget.0: Using interface 0 [ 1067.956529][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1067.957203][ T468] android_work: sent uevent USB_STATE=CONFIGURED [ 1067.967484][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1067.971172][T17634] F2FS-fs (loop5): invalid crc value [ 1067.980699][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 1067.987766][ T39] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A1 [ 1068.006634][T17634] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1068.019671][T17618] device veth1_macvtap entered promiscuous mode [ 1068.026021][ T39] usb 1-1: bad CDC descriptors [ 1068.053761][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1068.064034][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1068.092733][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1068.095790][T17634] F2FS-fs (loop5): Start checkpoint disabled! [ 1068.102534][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1068.117245][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1068.125429][T17634] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 1068.127056][ T2359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1068.141901][T17634] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1068.152146][T17634] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1068.244761][ T2359] kworker/u4:8: attempt to access beyond end of device [ 1068.244761][ T2359] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1068.339989][ T308] usb 1-1: USB disconnect, device number 19 [ 1068.346745][ T5431] android_work: sent uevent USB_STATE=DISCONNECTED [ 1068.376187][ T308] usblp0: removed [ 1069.887254][ T308] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1069.895209][ T5431] android_work: sent uevent USB_STATE=CONNECTED [ 1070.092760][ T308] usb 1-1: Dual-Role OTG device on HNP port [ 1070.099028][ T308] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 6.01 [ 1070.108541][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.119545][ T308] usb 1-1: Product: Test Gadget [ 1070.124516][ T308] usb 1-1: Manufacturer: Linux Foundation [ 1070.130442][ T308] usb 1-1: SerialNumber: 1234567890 [ 1070.141505][ C0] configfs-gadget.g1 gadget.0: Using interface 0 [ 1070.148953][ T5431] android_work: sent uevent USB_STATE=CONFIGURED [ 1070.170137][ T308] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 2 vid 0x1D6B pid 0x0104 [ 1070.204622][ T308] usb 1-1: bad CDC descriptors [ 1071.366280][T17749] using random self ethernet address [ 1071.372615][T17750] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5861'. [ 1071.378397][T17749] using random host ethernet address [ 1071.405334][T17750] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17750 comm=syz.5.5861 [ 1071.705266][ T5431] usb 1-1: USB disconnect, device number 20 [ 1071.713103][ T555] android_work: sent uevent USB_STATE=DISCONNECTED [ 1071.725011][ T5431] usblp0: removed [ 1072.142104][T17794] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5873'. [ 1072.152263][T17794] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17794 comm=syz.6.5873 [ 1072.191640][T17797] netlink: 388 bytes leftover after parsing attributes in process `syz.8.5875'. [ 1072.240050][ T5431] android_work: did not send uevent (0 0 0000000000000000) [ 1072.717354][ T5431] android_work: did not send uevent (0 0 0000000000000000) [ 1072.924561][T17828] netlink: 388 bytes leftover after parsing attributes in process `syz.9.5887'. [ 1073.158984][ T555] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1073.168671][ T5431] android_work: sent uevent USB_STATE=CONNECTED [ 1073.255181][ T308] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1073.374675][ T555] usb 1-1: Dual-Role OTG device on HNP port [ 1073.381803][ T555] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 6.01 [ 1073.399827][ T555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.416735][ T555] usb 1-1: Product: Test Gadget [ 1073.427174][ T555] usb 1-1: Manufacturer: Linux Foundation [ 1073.439570][ T555] usb 1-1: SerialNumber: 1234567890 [ 1073.450424][ T308] usb 10-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 1073.466609][ C0] configfs-gadget.g1 gadget.0: Using interface 0 [ 1073.474007][ T308] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.484965][ T308] usb 10-1: Product: syz [ 1073.491046][ T555] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 2 vid 0x1D6B pid 0x0104 [ 1073.504570][ T308] usb 10-1: Manufacturer: syz [ 1073.515091][ T308] usb 10-1: SerialNumber: syz [ 1073.524164][ T555] usb 1-1: bad CDC descriptors [ 1073.546020][ T308] android_work: sent uevent USB_STATE=CONFIGURED [ 1074.214096][T17858] FAULT_INJECTION: forcing a failure. [ 1074.214096][T17858] name failslab, interval 1, probability 10, space 0, times 100 [ 1074.227340][T17858] CPU: 1 PID: 17858 Comm: syz.6.5897 Tainted: G W syzkaller #0 [ 1074.236305][T17858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1074.246385][T17858] Call Trace: [ 1074.249691][T17858] [ 1074.252647][T17858] __dump_stack+0x21/0x24 [ 1074.257036][T17858] dump_stack_lvl+0x110/0x170 [ 1074.261759][T17858] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1074.266819][T17858] dump_stack+0x15/0x24 [ 1074.271011][T17858] should_fail_ex+0x3bf/0x510 [ 1074.275704][T17858] ? vm_area_dup+0x65/0x280 [ 1074.280234][T17858] __should_failslab+0xac/0xf0 [ 1074.285025][T17858] should_failslab+0x9/0x20 [ 1074.289552][T17858] kmem_cache_alloc+0x3b/0x320 [ 1074.294343][T17858] vm_area_dup+0x65/0x280 [ 1074.298718][T17858] __split_vma+0x1c6/0x980 [ 1074.303176][T17858] ? mas_find+0xdf/0x380 [ 1074.307519][T17858] do_mas_align_munmap+0x787/0x1330 [ 1074.312749][T17858] ? mas_state_walk+0x7ab/0xa80 [ 1074.317721][T17858] ? do_mas_munmap+0x2b0/0x2b0 [ 1074.322547][T17858] ? mas_walk+0x207/0x250 [ 1074.326901][T17858] do_mas_munmap+0x23d/0x2b0 [ 1074.331530][T17858] mmap_region+0x89e/0x2130 [ 1074.336067][T17858] ? __cfi_mmap_region+0x10/0x10 [ 1074.341039][T17858] ? cap_capable+0x1a6/0x230 [ 1074.345650][T17858] ? futex_wake+0x5fa/0x8e0 [ 1074.350196][T17858] ? cap_capable+0x1a6/0x230 [ 1074.354815][T17858] ? security_capable+0x99/0xc0 [ 1074.358843][T17618] FAULT_INJECTION: forcing a failure. [ 1074.358843][T17618] name failslab, interval 1, probability 10, space 0, times 100 [ 1074.359706][T17858] do_mmap+0x858/0xdd0 [ 1074.376632][T17858] ? __cfi_do_mmap+0x10/0x10 [ 1074.378640][ T92] FAULT_INJECTION: forcing a failure. [ 1074.378640][ T92] name failslab, interval 1, probability 10, space 0, times 100 [ 1074.381273][T17858] ? do_futex+0x2bf/0x430 [ 1074.398547][T17858] vm_mmap_pgoff+0x206/0x3f0 [ 1074.403233][T17858] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 1074.408358][T17858] ? xfd_validate_state+0x70/0x150 [ 1074.413492][T17858] ksys_mmap_pgoff+0xf6/0x1d0 [ 1074.418188][T17858] ? __kasan_check_write+0x14/0x20 [ 1074.423312][T17858] __x64_sys_mmap+0xfa/0x110 [ 1074.427994][T17858] x64_sys_call+0x8fd/0x9a0 [ 1074.432508][T17858] do_syscall_64+0x4c/0xa0 [ 1074.436950][T17858] ? clear_bhb_loop+0x30/0x80 [ 1074.441652][T17858] ? clear_bhb_loop+0x30/0x80 [ 1074.446358][T17858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1074.452279][T17858] RIP: 0033:0x7f80c0b9df99 [ 1074.456878][T17858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.476511][T17858] RSP: 002b:00007f80c1b53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1074.484947][T17858] RAX: ffffffffffffffda RBX: 00007f80c0e25fa0 RCX: 00007f80c0b9df99 [ 1074.492938][T17858] RDX: 0000000001000007 RSI: 000000000000a000 RDI: 0000200000000000 [ 1074.500925][T17858] RBP: 00007f80c0c34ec4 R08: ffffffffffffffff R09: 0000000000000000 [ 1074.508918][T17858] R10: 0000000000002172 R11: 0000000000000246 R12: 0000000000000000 [ 1074.516911][T17858] R13: 00007f80c0e26038 R14: 00007f80c0e25fa0 R15: 00007ffed7fd4fe8 [ 1074.524909][T17858] [ 1074.527949][T17618] CPU: 0 PID: 17618 Comm: syz-executor Tainted: G W syzkaller #0 [ 1074.537079][T17618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1074.547157][T17618] Call Trace: [ 1074.550470][T17618] [ 1074.553424][T17618] __dump_stack+0x21/0x24 [ 1074.557764][T17618] dump_stack_lvl+0x110/0x170 [ 1074.562459][T17618] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1074.567507][T17618] dump_stack+0x15/0x24 [ 1074.571677][T17618] should_fail_ex+0x3bf/0x510 [ 1074.576361][T17618] __should_failslab+0xac/0xf0 [ 1074.581166][T17618] should_failslab+0x9/0x20 [ 1074.585682][T17618] slab_pre_alloc_hook+0x30/0x1d0 [ 1074.590731][T17618] kmem_cache_alloc_lru+0x49/0x280 [ 1074.595857][T17618] ? __d_alloc+0x34/0x6d0 [ 1074.600228][T17618] ? lockref_get+0x12d/0x1c0 [ 1074.604929][T17618] __d_alloc+0x34/0x6d0 [ 1074.609109][T17618] d_alloc_cursor+0x41/0xd0 [ 1074.613629][T17618] dcache_dir_open+0x3b/0x80 [ 1074.618439][T17618] do_dentry_open+0x885/0x11f0 [ 1074.623227][T17618] ? __cfi_dcache_dir_open+0x10/0x10 [ 1074.628554][T17618] vfs_open+0x73/0x80 [ 1074.632551][T17618] path_openat+0x2699/0x2f30 [ 1074.637163][T17618] ? slab_post_alloc_hook+0x4f/0x2d0 [ 1074.642467][T17618] ? kmem_cache_alloc+0x166/0x320 [ 1074.647504][T17618] ? getname_flags+0xba/0x510 [ 1074.652184][T17618] ? do_sys_openat2+0xeb/0x820 [ 1074.656964][T17618] ? do_filp_open+0x420/0x420 [ 1074.661661][T17618] do_filp_open+0x1ee/0x420 [ 1074.666263][T17618] ? __cfi_do_filp_open+0x10/0x10 [ 1074.671321][T17618] ? alloc_fd+0x4c1/0x570 [ 1074.675666][T17618] do_sys_openat2+0x15e/0x820 [ 1074.680378][T17618] ? user_path_at_empty+0x162/0x1c0 [ 1074.685596][T17618] ? __cfi_path_umount+0x10/0x10 [ 1074.690600][T17618] ? do_sys_open+0xe0/0xe0 [ 1074.695029][T17618] ? __x64_sys_umount+0x12d/0x170 [ 1074.700068][T17618] __x64_sys_openat+0x136/0x160 [ 1074.704956][T17618] x64_sys_call+0x783/0x9a0 [ 1074.705968][ C1] FAULT_INJECTION: forcing a failure. [ 1074.705968][ C1] name failslab, interval 1, probability 10, space 0, times 99 [ 1074.709562][T17618] do_syscall_64+0x4c/0xa0 [ 1074.709590][T17618] ? clear_bhb_loop+0x30/0x80 [ 1074.731434][T17618] ? clear_bhb_loop+0x30/0x80 [ 1074.736127][T17618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1074.742040][T17618] RIP: 0033:0x7fac5979d2bc [ 1074.746480][T17618] Code: 4c 89 54 24 18 41 89 f2 41 83 e2 40 75 40 89 f0 f7 d0 a9 00 00 41 00 74 35 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 44 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 1074.766619][T17618] RSP: 002b:00007ffd1887dd70 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1074.775079][T17618] RAX: ffffffffffffffda RBX: 00007fac59834314 RCX: 00007fac5979d2bc [ 1074.783060][T17618] RDX: 0000000000090800 RSI: 00007ffd1887ef20 RDI: 00000000ffffff9c [ 1074.791044][T17618] RBP: 00007ffd1887ef0c R08: 0000000000000000 R09: 0000000000000000 [ 1074.799030][T17618] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd1887ef20 [ 1074.807011][T17618] R13: 00007fac59834314 R14: 00000000000fe964 R15: 00007ffd1887ef60 [ 1074.815008][T17618] [ 1074.818056][ C1] CPU: 1 PID: 1415 Comm: kworker/u4:7 Tainted: G W syzkaller #0 [ 1074.818170][ C0] FAULT_INJECTION: forcing a failure. [ 1074.818170][ C0] name failslab, interval 1, probability 10, space 0, times 99 [ 1074.827108][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1074.827125][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1074.856423][ C1] Call Trace: [ 1074.859716][ C1] [ 1074.862565][ C1] __dump_stack+0x21/0x24 [ 1074.866908][ C1] dump_stack_lvl+0x110/0x170 [ 1074.871598][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1074.876633][ C1] ? ret_from_fork+0x1f/0x30 [ 1074.881241][ C1] dump_stack+0x15/0x24 [ 1074.885409][ C1] should_fail_ex+0x3bf/0x510 [ 1074.890089][ C1] ? build_skb+0x2a/0x220 [ 1074.894520][ C1] __should_failslab+0xac/0xf0 [ 1074.899299][ C1] should_failslab+0x9/0x20 [ 1074.903818][ C1] kmem_cache_alloc+0x3b/0x320 [ 1074.908593][ C1] ? __cfi_update_group_capacity+0x10/0x10 [ 1074.914412][ C1] build_skb+0x2a/0x220 [ 1074.918584][ C1] page_to_skb+0x12d/0xb50 [ 1074.923097][ C1] ? load_balance+0x452c/0x4af0 [ 1074.927957][ C1] receive_buf+0x469/0x4890 [ 1074.932475][ C1] ? detach_entity_load_avg+0x790/0x790 [ 1074.938027][ C1] ? virtnet_poll_tx+0x550/0x550 [ 1074.942972][ C1] ? __kasan_check_read+0x11/0x20 [ 1074.948001][ C1] ? resched_curr+0xac/0x3a0 [ 1074.952597][ C1] ? virtqueue_get_buf_ctx+0x47a/0xcf0 [ 1074.958097][ C1] ? detach_buf_split+0x890/0xa90 [ 1074.963164][ C1] ? virtqueue_get_buf+0x1f/0x30 [ 1074.968109][ C1] ? virtqueue_get_buf_ctx+0x6bc/0xcf0 [ 1074.973600][ C1] virtnet_poll+0x5c9/0x1150 [ 1074.978228][ C1] ? __cfi_virtnet_poll+0x10/0x10 [ 1074.983285][ C1] __napi_poll+0xcd/0x5d0 [ 1074.987708][ C1] net_rx_action+0x4a3/0xa90 [ 1074.992309][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 1074.997441][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 1075.002684][ C1] ? irqtime_account_irq+0x75/0x240 [ 1075.007901][ C1] handle_softirqs+0x1d7/0x600 [ 1075.012688][ C1] __irq_exit_rcu+0x52/0xf0 [ 1075.017201][ C1] irq_exit_rcu+0x9/0x10 [ 1075.021453][ C1] common_interrupt+0xbe/0xe0 [ 1075.026160][ C1] [ 1075.029101][ C1] [ 1075.032040][ C1] asm_common_interrupt+0x27/0x40 [ 1075.037086][ C1] RIP: 0010:smp_call_function_many_cond+0x85a/0x940 [ 1075.043694][ C1] Code: e6 01 31 ff e8 77 72 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 43 6e 09 00 e9 38 ff ff ff f3 90 41 0f b6 44 1d 00 <84> c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff ff e8 20 6e 09 00 [ 1075.063309][ C1] RSP: 0018:ffffc9000df57840 EFLAGS: 00000293 [ 1075.069400][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888113ebe540 [ 1075.077398][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1075.085405][ C1] RBP: ffffc9000df57978 R08: ffff8881f6f390d7 R09: 1ffff1103ede721a [ 1075.093388][ C1] R10: 0000000000000000 R11: ffffffff8134b650 R12: 1ffff1103ede7218 [ 1075.101476][ C1] R13: 1ffff1103edc7ae1 R14: 0000000000000000 R15: ffff8881f6e3d708 [ 1075.109461][ C1] ? __cfi_x2apic_send_IPI+0x10/0x10 [ 1075.114765][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 1075.119802][ C1] ? smp_call_function_many+0x40/0x40 [ 1075.125198][ C1] ? kmem_cache_alloc_bulk+0xf8/0x3c0 [ 1075.130602][ C1] ? text_poke+0x30/0x30 [ 1075.134853][ C1] ? text_poke_loc_init+0x105/0x560 [ 1075.140071][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 1075.145113][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 1075.150240][ C1] text_poke_bp_batch+0x1cf/0x600 [ 1075.155294][ C1] ? text_poke_loc_init+0x560/0x560 [ 1075.160512][ C1] ? __kasan_check_write+0x14/0x20 [ 1075.165638][ C1] ? mutex_lock+0x93/0x1b0 [ 1075.170074][ C1] ? __cfi_mutex_lock+0x10/0x10 [ 1075.174945][ C1] ? text_poke_queue+0xde/0x1a0 [ 1075.179808][ C1] text_poke_finish+0x1a/0x30 [ 1075.184507][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 1075.190501][ C1] __jump_label_update+0x38f/0x3b0 [ 1075.195709][ C1] jump_label_update+0x39b/0x450 [ 1075.200656][ C1] static_key_enable_cpuslocked+0x126/0x240 [ 1075.206651][ C1] static_key_enable+0x1a/0x30 [ 1075.211430][ C1] toggle_allocation_gate+0xba/0x440 [ 1075.216730][ C1] ? __cfi_toggle_allocation_gate+0x10/0x10 [ 1075.222656][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 1075.227525][ C1] ? finish_task_switch+0x16b/0x7c0 [ 1075.232762][ C1] ? switch_mm_irqs_off+0x32d/0x960 [ 1075.237968][ C1] ? __schedule+0xbea/0x14b0 [ 1075.242575][ C1] process_one_work+0x717/0xc30 [ 1075.247448][ C1] worker_thread+0xa4d/0x11d0 [ 1075.252141][ C1] kthread+0x281/0x320 [ 1075.256225][ C1] ? __cfi_worker_thread+0x10/0x10 [ 1075.261353][ C1] ? __cfi_kthread+0x10/0x10 [ 1075.265958][ C1] ret_from_fork+0x1f/0x30 [ 1075.270398][ C1] [ 1075.273431][ C0] CPU: 0 PID: 17618 Comm: syz-executor Tainted: G W syzkaller #0 [ 1075.274448][ C1] FAULT_INJECTION: forcing a failure. [ 1075.274448][ C1] name failslab, interval 1, probability 10, space 0, times 98 [ 1075.282568][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1075.282582][ C0] Call Trace: [ 1075.282589][ C0] [ 1075.282596][ C0] __dump_stack+0x21/0x24 [ 1075.315840][ C0] dump_stack_lvl+0x110/0x170 [ 1075.320600][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1075.325641][ C0] ? detach_entity_load_avg+0x790/0x790 [ 1075.331204][ C0] dump_stack+0x15/0x24 [ 1075.335392][ C0] should_fail_ex+0x3bf/0x510 [ 1075.340098][ C0] __should_failslab+0xac/0xf0 [ 1075.344876][ C0] should_failslab+0x9/0x20 [ 1075.349400][ C0] kmem_cache_alloc_node+0x42/0x330 [ 1075.354612][ C0] ? __alloc_skb+0xe8/0x4a0 [ 1075.359142][ C0] __alloc_skb+0xe8/0x4a0 [ 1075.363479][ C0] ndisc_send_rs+0x31d/0x870 [ 1075.368150][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 1075.373106][ C0] addrconf_rs_timer+0x35a/0x600 [ 1075.378056][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1075.383697][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1075.389168][ C0] call_timer_fn+0x46/0x2a0 [ 1075.393738][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1075.399202][ C0] __run_timers+0x646/0x9b0 [ 1075.403713][ C0] ? calc_index+0x200/0x200 [ 1075.408225][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1075.413444][ C0] run_timer_softirq+0x6a/0xf0 [ 1075.418214][ C0] handle_softirqs+0x1d7/0x600 [ 1075.422987][ C0] __irq_exit_rcu+0x52/0xf0 [ 1075.427507][ C0] irq_exit_rcu+0x9/0x10 [ 1075.431755][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1075.437405][ C0] [ 1075.440342][ C0] [ 1075.443284][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1075.449305][ C0] RIP: 0010:preempt_schedule_irq+0xa5/0x120 [ 1075.455229][ C0] Code: 44 24 20 00 02 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 d1 fb 4c fc fb bf 01 00 00 00 46 e5 ff ff fa bf 01 00 00 00 e8 7b fd 4c fc 65 48 8b 1d c3 d4 [ 1075.474862][ C0] RSP: 0018:ffffc9000ee274a0 EFLAGS: 00000246 [ 1075.480940][ C0] RAX: 1ffff11026408159 RBX: ffffc9000ee27578 RCX: ffffffff87b7b100 [ 1075.488930][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1075.496908][ C0] RBP: ffffc9000ee27528 R08: ffff888132040007 R09: 1ffff11026408000 [ 1075.504887][ C0] R10: dffffc0000000000 R11: ffffed1026408001 R12: 0000000000000000 [ 1075.512864][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92001dc4e94 [ 1075.520859][ C0] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 1075.526602][ C0] ? kernel_text_address+0xa0/0xd0 [ 1075.531736][ C0] raw_irqentry_exit_cond_resched+0x29/0x30 [ 1075.538236][ C0] irqentry_exit+0x37/0x40 [ 1075.542665][ C0] sysvec_reschedule_ipi+0x78/0x80 [ 1075.547794][ C0] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1075.553284][ C0] RIP: 0010:dump_stack_lvl+0x144/0x170 [ 1075.558759][ C0] Code: e6 00 02 00 00 31 ff e8 ea 56 77 fc 49 81 e5 00 02 00 00 75 07 e8 1c 52 77 fc eb 06 e8 15 52 77 fc fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 40 [ 1075.578397][ C0] RSP: 0018:ffffc9000ee27620 EFLAGS: 00000293 [ 1075.584481][ C0] RAX: ffffffff84fa142b RBX: ffffffff860afda0 RCX: ffff888132040000 [ 1075.592466][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 1075.600439][ C0] RBP: ffffc9000ee276b8 R08: 0000000000000003 R09: 0000000000000004 [ 1075.608418][ C0] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 1075.616400][ C0] R13: 0000000000000200 R14: dffffc0000000004 R15: 1ffff92001dc4ec4 [ 1075.624381][ C0] ? dump_stack_lvl+0x13b/0x170 [ 1075.629248][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1075.634302][ C0] dump_stack+0x15/0x24 [ 1075.638473][ C0] should_fail_ex+0x3bf/0x510 [ 1075.643167][ C0] __should_failslab+0xac/0xf0 [ 1075.647948][ C0] should_failslab+0x9/0x20 [ 1075.652460][ C0] slab_pre_alloc_hook+0x30/0x1d0 [ 1075.657533][ C0] kmem_cache_alloc_lru+0x49/0x280 [ 1075.662659][ C0] ? __d_alloc+0x34/0x6d0 [ 1075.667004][ C0] ? lockref_get+0x12d/0x1c0 [ 1075.671619][ C0] __d_alloc+0x34/0x6d0 [ 1075.675792][ C0] d_alloc_cursor+0x41/0xd0 [ 1075.680322][ C0] dcache_dir_open+0x3b/0x80 [ 1075.684922][ C0] do_dentry_open+0x885/0x11f0 [ 1075.689701][ C0] ? __cfi_dcache_dir_open+0x10/0x10 [ 1075.695022][ C0] vfs_open+0x73/0x80 [ 1075.699020][ C0] path_openat+0x2699/0x2f30 [ 1075.703623][ C0] ? slab_post_alloc_hook+0x4f/0x2d0 [ 1075.708928][ C0] ? kmem_cache_alloc+0x166/0x320 [ 1075.713976][ C0] ? getname_flags+0xba/0x510 [ 1075.718687][ C0] ? do_sys_openat2+0xeb/0x820 [ 1075.723482][ C0] ? do_filp_open+0x420/0x420 [ 1075.728179][ C0] do_filp_open+0x1ee/0x420 [ 1075.732713][ C0] ? __cfi_do_filp_open+0x10/0x10 [ 1075.737756][ C0] ? alloc_fd+0x4c1/0x570 [ 1075.742098][ C0] do_sys_openat2+0x15e/0x820 [ 1075.746792][ C0] ? user_path_at_empty+0x162/0x1c0 [ 1075.752015][ C0] ? __cfi_path_umount+0x10/0x10 [ 1075.757057][ C0] ? do_sys_open+0xe0/0xe0 [ 1075.761505][ C0] ? __x64_sys_umount+0x12d/0x170 [ 1075.766549][ C0] __x64_sys_openat+0x136/0x160 [ 1075.771423][ C0] x64_sys_call+0x783/0x9a0 [ 1075.775952][ C0] do_syscall_64+0x4c/0xa0 [ 1075.780388][ C0] ? clear_bhb_loop+0x30/0x80 [ 1075.785083][ C0] ? clear_bhb_loop+0x30/0x80 [ 1075.789773][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1075.795688][ C0] RIP: 0033:0x7fac5979d2bc [ 1075.800119][ C0] Code: 4c 89 54 24 18 41 89 f2 41 83 e2 40 75 40 89 f0 f7 d0 a9 00 00 41 00 74 35 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 44 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 1075.819728][ C0] RSP: 002b:00007ffd1887dd70 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1075.828167][ C0] RAX: ffffffffffffffda RBX: 00007fac59834314 RCX: 00007fac5979d2bc [ 1075.836153][ C0] RDX: 0000000000090800 RSI: 00007ffd1887ef20 RDI: 00000000ffffff9c [ 1075.844132][ C0] RBP: 00007ffd1887ef0c R08: 0000000000000000 R09: 0000000000000000 [ 1075.852134][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd1887ef20 [ 1075.860129][ C0] R13: 00007fac59834314 R14: 00000000000fe964 R15: 00007ffd1887ef60 [ 1075.868111][ C0] [ 1075.871150][ C1] CPU: 1 PID: 23 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 [ 1075.879939][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1075.890008][ C1] Call Trace: [ 1075.893313][ C1] [ 1075.896297][ C1] __dump_stack+0x21/0x24 [ 1075.900659][ C1] dump_stack_lvl+0x110/0x170 [ 1075.905351][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1075.910396][ C1] ? _find_next_bit+0x8a/0x130 [ 1075.915248][ C1] dump_stack+0x15/0x24 [ 1075.919462][ C1] should_fail_ex+0x3bf/0x510 [ 1075.924160][ C1] __should_failslab+0xac/0xf0 [ 1075.928949][ C1] should_failslab+0x9/0x20 [ 1075.929987][T17829] FAULT_INJECTION: forcing a failure. [ 1075.929987][T17829] name failslab, interval 1, probability 10, space 0, times 97 [ 1075.933570][ C1] kmem_cache_alloc_node+0x42/0x330 [ 1075.947992][ T555] usb 10-1: USB disconnect, device number 10 [ 1075.951530][ C1] ? __alloc_skb+0xe8/0x4a0 [ 1075.951560][ C1] ? __build_skb_around+0x24c/0x470 [ 1075.967245][ C1] __alloc_skb+0xe8/0x4a0 [ 1075.969370][ T555] FAULT_INJECTION: forcing a failure. [ 1075.969370][ T555] name failslab, interval 1, probability 10, space 0, times 96 [ 1075.971607][ C1] wg_packet_send_keepalive+0x62/0x1c0 [ 1075.989841][ C1] ? wg_expired_send_persistent_keepalive+0x44/0x80 [ 1075.996454][ C1] wg_expired_send_persistent_keepalive+0x53/0x80 [ 1076.002895][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 1076.010030][ C1] call_timer_fn+0x46/0x2a0 [ 1076.014559][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 1076.021690][ C1] __run_timers+0x646/0x9b0 [ 1076.026219][ C1] ? calc_index+0x200/0x200 [ 1076.030757][ C1] run_timer_softirq+0x6a/0xf0 [ 1076.035547][ C1] handle_softirqs+0x1d7/0x600 [ 1076.040346][ C1] ? __cfi_run_ksoftirqd+0x10/0x10 [ 1076.045489][ C1] run_ksoftirqd+0x28/0x30 [ 1076.049922][ C1] smpboot_thread_fn+0x48c/0x8e0 [ 1076.055059][ C1] kthread+0x281/0x320 [ 1076.059143][ C1] ? __cfi_smpboot_thread_fn+0x10/0x10 [ 1076.064626][ C1] ? __cfi_kthread+0x10/0x10 [ 1076.069256][ C1] ret_from_fork+0x1f/0x30 [ 1076.073897][ C1] [ 1076.076941][ T555] CPU: 0 PID: 555 Comm: kworker/0:6 Tainted: G W syzkaller #0 [ 1076.085869][ T555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1076.089289][T17857] FAULT_INJECTION: forcing a failure. [ 1076.089289][T17857] name failslab, interval 1, probability 10, space 0, times 95 [ 1076.095952][ T555] Workqueue: usb_hub_wq hub_event [ 1076.108920][ T2865] FAULT_INJECTION: forcing a failure. [ 1076.108920][ T2865] name failslab, interval 1, probability 10, space 0, times 95 [ 1076.113800][ T555] Call Trace: [ 1076.113810][ T555] [ 1076.113818][ T555] __dump_stack+0x21/0x24 [ 1076.113857][ T555] dump_stack_lvl+0x110/0x170 [ 1076.113884][ T555] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1076.128823][ T468] FAULT_INJECTION: forcing a failure. [ 1076.128823][ T468] name failslab, interval 1, probability 10, space 0, times 94 [ 1076.129936][ T555] dump_stack+0x15/0x24 [ 1076.163832][ T555] should_fail_ex+0x3bf/0x510 [ 1076.168525][ T555] __should_failslab+0xac/0xf0 [ 1076.173342][ T555] should_failslab+0x9/0x20 [ 1076.177862][ T555] __kmem_cache_alloc_node+0x3d/0x2d0 [ 1076.183264][ T555] ? kobject_get_path+0xbf/0x200 [ 1076.188301][ T555] ? kobject_get_path+0xbf/0x200 [ 1076.193288][ T555] __kmalloc+0xa4/0x1e0 [ 1076.197457][ T555] kobject_get_path+0xbf/0x200 [ 1076.202238][ T555] kobject_uevent_env+0x29f/0x720 [ 1076.207282][ T555] ? up_read+0x56/0x1d0 [ 1076.211531][ T555] kobject_uevent+0x1d/0x30 [ 1076.216054][ T555] device_del+0xcda/0xe50 [ 1076.220449][ T555] ? __cfi_device_del+0x10/0x10 [ 1076.225338][ T555] ? device_unregister+0x27/0x40 [ 1076.230297][ T555] usb_disable_device+0x3a8/0x750 [ 1076.235397][ T555] usb_disconnect+0x32d/0x880 [ 1076.240099][ T555] hub_event+0x1a66/0x4310 [ 1076.244535][ T555] ? __switch_to+0x56f/0x1070 [ 1076.249235][ T555] ? __cfi_hub_event+0x10/0x10 [ 1076.254034][ T555] ? __schedule+0xbea/0x14b0 [ 1076.258678][ T555] process_one_work+0x717/0xc30 [ 1076.263542][ T555] worker_thread+0xa4d/0x11d0 [ 1076.268308][ T555] kthread+0x281/0x320 [ 1076.272424][ T555] ? __cfi_worker_thread+0x10/0x10 [ 1076.277562][ T555] ? __cfi_kthread+0x10/0x10 [ 1076.282170][ T555] ret_from_fork+0x1f/0x30 [ 1076.286635][ T555] [ 1076.289674][T17857] CPU: 1 PID: 17857 Comm: syz.6.5897 Tainted: G W syzkaller #0 [ 1076.291833][ T2359] FAULT_INJECTION: forcing a failure. [ 1076.291833][ T2359] name failslab, interval 1, probability 10, space 0, times 93 [ 1076.298631][T17857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1076.321440][T17857] Call Trace: [ 1076.324731][T17857] [ 1076.327673][T17857] __dump_stack+0x21/0x24 [ 1076.332023][T17857] dump_stack_lvl+0x110/0x170 [ 1076.336716][T17857] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1076.341762][T17857] ? __this_cpu_preempt_check+0x13/0x20 [ 1076.347331][T17857] ? memcg_rstat_updated+0x56/0x110 [ 1076.352619][T17857] dump_stack+0x15/0x24 [ 1076.356828][T17857] should_fail_ex+0x3bf/0x510 [ 1076.361522][T17857] ? mas_alloc_nodes+0x2d8/0x850 [ 1076.366477][T17857] __should_failslab+0xac/0xf0 [ 1076.371259][T17857] should_failslab+0x9/0x20 [ 1076.375770][T17857] kmem_cache_alloc+0x3b/0x320 [ 1076.380554][T17857] mas_alloc_nodes+0x2d8/0x850 [ 1076.385334][T17857] mas_preallocate+0xe3d/0x1430 [ 1076.390196][T17857] ? __cfi_mas_preallocate+0x10/0x10 [ 1076.395496][T17857] ? rwsem_write_trylock+0x136/0x300 [ 1076.400836][T17857] vma_expand+0x437/0xad0 [ 1076.405183][T17857] mmap_region+0xf04/0x2130 [ 1076.409699][T17857] ? __kasan_check_write+0x14/0x20 [ 1076.414827][T17857] ? __cfi_mmap_region+0x10/0x10 [ 1076.419785][T17857] ? cap_mmap_addr+0x165/0x2e0 [ 1076.424563][T17857] ? get_unmapped_area+0x30c/0x370 [ 1076.429686][T17857] do_mmap+0x858/0xdd0 [ 1076.433829][T17857] ? __cfi_do_mmap+0x10/0x10 [ 1076.438440][T17857] ? do_futex+0x2bf/0x430 [ 1076.442775][T17857] ? _copy_from_user+0x8f/0xc0 [ 1076.447634][T17857] vm_mmap_pgoff+0x206/0x3f0 [ 1076.452239][T17857] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 1076.457362][T17857] ? __x64_sys_futex+0x100/0x100 [ 1076.462314][T17857] ? xfd_validate_state+0x70/0x150 [ 1076.467440][T17857] ksys_mmap_pgoff+0xf6/0x1d0 [ 1076.472135][T17857] __x64_sys_mmap+0xfa/0x110 [ 1076.476740][T17857] x64_sys_call+0x8fd/0x9a0 [ 1076.481272][T17857] do_syscall_64+0x4c/0xa0 [ 1076.485712][T17857] ? clear_bhb_loop+0x30/0x80 [ 1076.490417][T17857] ? clear_bhb_loop+0x30/0x80 [ 1076.495133][T17857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1076.501088][T17857] RIP: 0033:0x7f80c0b9dd02 [ 1076.505529][T17857] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 1076.525180][T17857] RSP: 002b:00007ffed7fd4f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1076.533624][T17857] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f80c0b9dd02 [ 1076.541619][T17857] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1076.549603][T17857] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 1076.557591][T17857] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffed7fd50e0 [ 1076.565575][T17857] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1076.573564][T17857] [ 1076.576594][ T2359] CPU: 0 PID: 2359 Comm: kworker/u4:8 Tainted: G W syzkaller #0 [ 1076.585643][ T2359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1076.595709][ T2359] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 1076.602684][ T2359] Call Trace: [ 1076.606060][ T2359] [ 1076.609012][ T2359] __dump_stack+0x21/0x24 [ 1076.613359][ T2359] dump_stack_lvl+0x110/0x170 [ 1076.618051][ T2359] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1076.623111][ T2359] ? __cfi_fib_rules_lookup+0x10/0x10 [ 1076.628609][ T2359] dump_stack+0x15/0x24 [ 1076.632777][ T2359] should_fail_ex+0x3bf/0x510 [ 1076.637471][ T2359] ? dst_alloc+0x16a/0x1e0 [ 1076.641905][ T2359] __should_failslab+0xac/0xf0 [ 1076.646684][ T2359] should_failslab+0x9/0x20 [ 1076.651212][ T2359] kmem_cache_alloc+0x3b/0x320 [ 1076.656007][ T2359] dst_alloc+0x16a/0x1e0 [ 1076.660273][ T2359] ip_route_output_key_hash_rcu+0x13f8/0x2160 [ 1076.666444][ T2359] ? ip_route_output_key_hash_rcu+0x17c1/0x2160 [ 1076.672713][ T2359] ip_route_output_flow+0x143/0x300 [ 1076.677922][ T2359] ? __cfi_ip_route_output_flow+0x10/0x10 [ 1076.683661][ T2359] ? inet_confirm_addr+0x10f/0x120 [ 1076.688805][ T2359] send4+0x331/0x9d0 [ 1076.692737][ T2359] ? send4+0x1eb/0x9d0 [ 1076.696853][ T2359] ? wg_socket_send_skb_to_peer+0x1d0/0x1d0 [ 1076.702789][ T2359] wg_socket_send_skb_to_peer+0xd4/0x1d0 [ 1076.708451][ T2359] wg_socket_send_buffer_to_peer+0x118/0x170 [ 1076.714481][ T2359] wg_packet_handshake_send_worker+0x200/0x290 [ 1076.720661][ T2359] ? __cfi_wg_packet_handshake_send_worker+0x10/0x10 [ 1076.727369][ T2359] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1076.733226][ T2359] ? try_to_wake_up+0x622/0x1250 [ 1076.738205][ T2359] process_one_work+0x717/0xc30 [ 1076.743088][ T2359] worker_thread+0xa4d/0x11d0 [ 1076.747806][ T2359] kthread+0x281/0x320 [ 1076.751901][ T2359] ? __cfi_worker_thread+0x10/0x10 [ 1076.757029][ T2359] ? __cfi_kthread+0x10/0x10 [ 1076.761665][ T2359] ret_from_fork+0x1f/0x30 [ 1076.766108][ T2359] [ 1076.769150][T17829] CPU: 1 PID: 17829 Comm: syz.9.5888 Tainted: G W syzkaller #0 [ 1076.778113][T17829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1076.788182][T17829] Call Trace: [ 1076.791473][T17829] [ 1076.794416][T17829] __dump_stack+0x21/0x24 [ 1076.798762][T17829] dump_stack_lvl+0x110/0x170 [ 1076.803451][T17829] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1076.808491][T17829] ? format_decode+0xbe2/0x1520 [ 1076.813358][T17829] dump_stack+0x15/0x24 [ 1076.817524][T17829] should_fail_ex+0x3bf/0x510 [ 1076.822222][T17829] __should_failslab+0xac/0xf0 [ 1076.827022][T17829] should_failslab+0x9/0x20 [ 1076.831573][T17829] kmem_cache_alloc_node+0x42/0x330 [ 1076.836800][T17829] ? __alloc_skb+0xe8/0x4a0 [ 1076.841320][T17829] ? __cfi_usb_udc_uevent+0x10/0x10 [ 1076.846603][T17829] __alloc_skb+0xe8/0x4a0 [ 1076.850953][T17829] ? mutex_lock+0x93/0x1b0 [ 1076.855387][T17829] alloc_uevent_skb+0x85/0x240 [ 1076.860159][T17829] kobject_uevent_net_broadcast+0x343/0x5b0 [ 1076.866105][T17829] kobject_uevent_env+0x541/0x720 [ 1076.871155][T17829] kobject_uevent+0x1d/0x30 [ 1076.875671][T17829] gadget_unbind_driver+0x320/0x3d0 [ 1076.880874][T17829] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 1076.886673][T17829] device_release_driver_internal+0x486/0x7e0 [ 1076.892797][T17829] driver_detach+0x1f1/0x2d0 [ 1076.897403][T17829] bus_remove_driver+0x121/0x1d0 [ 1076.902357][T17829] driver_unregister+0x75/0xa0 [ 1076.907150][T17829] usb_gadget_unregister_driver+0x4e/0x70 [ 1076.912894][T17829] raw_release+0xda/0x260 [ 1076.917274][T17829] ? __cfi_raw_release+0x10/0x10 [ 1076.922224][T17829] __fput+0x1fd/0x8f0 [ 1076.926236][T17829] ____fput+0x15/0x20 [ 1076.930243][T17829] task_work_run+0x1e1/0x250 [ 1076.934858][T17829] ? __cfi_task_work_run+0x10/0x10 [ 1076.939991][T17829] ? __cfi___close_range+0x10/0x10 [ 1076.945121][T17829] exit_to_user_mode_loop+0x9b/0xb0 [ 1076.950334][T17829] exit_to_user_mode_prepare+0x87/0xd0 [ 1076.955809][T17829] syscall_exit_to_user_mode+0x1a/0x30 [ 1076.961294][T17829] do_syscall_64+0x58/0xa0 [ 1076.965722][T17829] ? clear_bhb_loop+0x30/0x80 [ 1076.970406][T17829] ? clear_bhb_loop+0x30/0x80 [ 1076.975107][T17829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1076.981020][T17829] RIP: 0033:0x7ff964d9df99 [ 1076.985450][T17829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.005065][T17829] RSP: 002b:00007ffec888ee98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1077.013492][T17829] RAX: 0000000000000000 RBX: 00007ff965027da0 RCX: 00007ff964d9df99 [ 1077.021470][T17829] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1077.029440][T17829] RBP: 00007ff965027da0 R08: 00007ff965026038 R09: 0000000000000000 [ 1077.037423][T17829] R10: 00000000005f20c4 R11: 0000000000000246 R12: 00000000000ff573 [ 1077.045404][T17829] R13: 00007ff96502609c R14: 00000000000fe9ed R15: 00007ff965026090 [ 1077.053398][T17829] [ 1077.056641][T12074] FAULT_INJECTION: forcing a failure. [ 1077.056641][T12074] name failslab, interval 1, probability 10, space 0, times 92 [ 1077.069601][T17830] FAULT_INJECTION: forcing a failure. [ 1077.069601][T17830] name failslab, interval 1, probability 10, space 0, times 91 [ 1077.069638][ T468] CPU: 1 PID: 468 Comm: kworker/1:5 Tainted: G W syzkaller #0 [ 1077.082658][T17847] FAULT_INJECTION: forcing a failure. [ 1077.082658][T17847] name failslab, interval 1, probability 10, space 0, times 91 [ 1077.091410][ T468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1077.091426][ T468] Workqueue: ipv6_addrconf addrconf_dad_work [ 1077.120233][ T468] Call Trace: [ 1077.123537][ T468] [ 1077.126490][ T468] __dump_stack+0x21/0x24 [ 1077.130844][ T468] dump_stack_lvl+0x110/0x170 [ 1077.135537][ T468] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1077.140571][ T468] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1077.146821][ T468] dump_stack+0x15/0x24 [ 1077.147171][ T26] FAULT_INJECTION: forcing a failure. [ 1077.147171][ T26] name failslab, interval 1, probability 10, space 0, times 90 [ 1077.150998][ T468] should_fail_ex+0x3bf/0x510 [ 1077.168447][ T468] __should_failslab+0xac/0xf0 [ 1077.173228][ T468] should_failslab+0x9/0x20 [ 1077.177734][ T468] kmem_cache_alloc_node+0x42/0x330 [ 1077.182946][ T468] ? __alloc_skb+0xe8/0x4a0 [ 1077.187456][ T468] __alloc_skb+0xe8/0x4a0 [ 1077.191790][ T468] ? __kasan_check_read+0x11/0x20 [ 1077.196820][ T468] __ipv6_ifa_notify+0x200/0xe80 [ 1077.201771][ T468] ? worker_thread+0xa4d/0x11d0 [ 1077.206636][ T468] ? kthread+0x281/0x320 [ 1077.210901][ T468] ? ret_from_fork+0x1f/0x30 [ 1077.215533][ T468] ? snmp6_fill_stats+0x6c0/0x6c0 [ 1077.220604][ T468] ? __kasan_check_write+0x14/0x20 [ 1077.225807][ T468] ? try_to_grab_pending+0x1a4/0x580 [ 1077.231125][ T468] ? mod_delayed_work_on+0xe0/0xe0 [ 1077.236258][ T468] ? __kasan_check_write+0x14/0x20 [ 1077.241381][ T468] ? __cancel_work+0x198/0x200 [ 1077.246168][ T468] addrconf_dad_completed+0x192/0xe80 [ 1077.251561][ T468] ? addrconf_dad_stop+0x440/0x440 [ 1077.256712][ T468] addrconf_dad_work+0xc1b/0x14a0 [ 1077.261767][ T468] ? __cfi_addrconf_dad_work+0x10/0x10 [ 1077.267241][ T468] ? __kasan_check_write+0x14/0x20 [ 1077.272388][ T468] ? _raw_spin_lock_irq+0x95/0xf0 [ 1077.277426][ T468] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1077.282982][ T468] ? __schedule+0xbea/0x14b0 [ 1077.287605][ T468] process_one_work+0x717/0xc30 [ 1077.292461][ T468] worker_thread+0xa4d/0x11d0 [ 1077.297181][ T468] kthread+0x281/0x320 [ 1077.301266][ T468] ? __cfi_worker_thread+0x10/0x10 [ 1077.306391][ T468] ? __cfi_kthread+0x10/0x10 [ 1077.310997][ T468] ret_from_fork+0x1f/0x30 [ 1077.315434][ T468] [ 1077.318493][ T26] CPU: 0 PID: 26 Comm: kdevtmpfs Tainted: G W syzkaller #0 [ 1077.319214][ T141] FAULT_INJECTION: forcing a failure. [ 1077.319214][ T141] name failslab, interval 1, probability 10, space 0, times 89 [ 1077.327121][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1077.327135][ T26] Call Trace: [ 1077.327141][ T26] [ 1077.327149][ T26] __dump_stack+0x21/0x24 [ 1077.327175][ T26] dump_stack_lvl+0x110/0x170 [ 1077.327197][ T26] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1077.327219][ T26] ? __switch_to+0x56f/0x1070 [ 1077.327243][ T26] dump_stack+0x15/0x24 [ 1077.327265][ T26] should_fail_ex+0x3bf/0x510 [ 1077.327283][ T26] ? getname_kernel+0x59/0x2e0 [ 1077.388635][ T26] __should_failslab+0xac/0xf0 [ 1077.393419][ T26] should_failslab+0x9/0x20 [ 1077.397936][ T26] kmem_cache_alloc+0x3b/0x320 [ 1077.402726][ T26] getname_kernel+0x59/0x2e0 [ 1077.407332][ T26] kern_path_locked+0x7a/0x3e0 [ 1077.412107][ T26] ? __kasan_check_write+0x14/0x20 [ 1077.417238][ T26] ? _raw_spin_lock+0x94/0xf0 [ 1077.421933][ T26] ? __cfi_kern_path_locked+0x10/0x10 [ 1077.427320][ T26] devtmpfs_work_loop+0x270/0xe20 [ 1077.432442][ T26] ? public_dev_mount+0xe0/0xe0 [ 1077.437320][ T26] ? mntput_no_expire+0x100/0x6b0 [ 1077.442362][ T26] ? native_send_call_func_single_ipi+0x6f/0x80 [ 1077.448634][ T26] ? select_task_rq_fair+0x57f/0x34f0 [ 1077.454039][ T26] ? __smp_call_single_queue+0x7a/0xa0 [ 1077.459524][ T26] ? ttwu_queue_wakelist+0x307/0x4d0 [ 1077.464838][ T26] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 1077.470315][ T26] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1077.476153][ T26] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1077.481983][ T26] ? complete+0x167/0x1c0 [ 1077.486397][ T26] devtmpfsd+0x49/0x50 [ 1077.490483][ T26] kthread+0x281/0x320 [ 1077.494564][ T26] ? __cfi_devtmpfsd+0x10/0x10 [ 1077.499353][ T26] ? __cfi_kthread+0x10/0x10 [ 1077.503962][ T26] ret_from_fork+0x1f/0x30 [ 1077.508391][ T26] [ 1077.511428][ T2865] CPU: 1 PID: 2865 Comm: kworker/u4:9 Tainted: G W syzkaller #0 [ 1077.520480][ T2865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1077.530557][ T2865] Workqueue: writeback wb_workfn (flush-8:0) [ 1077.536651][ T2865] Call Trace: [ 1077.539949][ T2865] [ 1077.542899][ T2865] __dump_stack+0x21/0x24 [ 1077.547247][ T2865] dump_stack_lvl+0x110/0x170 [ 1077.551946][ T2865] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1077.556993][ T2865] ? __dev_queue_xmit+0x1e69/0x3540 [ 1077.559941][T15998] FAULT_INJECTION: forcing a failure. [ 1077.559941][T15998] name failslab, interval 1, probability 10, space 0, times 89 [ 1077.562303][ T2865] ? ip6_finish_output+0x60b/0xbe0 [ 1077.580293][ T2865] ? ip6_output+0x1fa/0x410 [ 1077.584809][ T2865] ? ip6_local_out+0x211/0x3d0 [ 1077.589651][ T2865] ? send6+0x49c/0x690 [ 1077.593729][ T2865] ? wg_socket_send_skb_to_peer+0x114/0x1d0 [ 1077.599628][ T2865] ? wg_socket_send_buffer_to_peer+0x118/0x170 [ 1077.605797][ T2865] dump_stack+0x15/0x24 [ 1077.609972][ T2865] should_fail_ex+0x3bf/0x510 [ 1077.614677][ T2865] ? ext4_init_io_end+0x29/0x130 [ 1077.619675][ T2865] __should_failslab+0xac/0xf0 [ 1077.624460][ T2865] should_failslab+0x9/0x20 [ 1077.628979][ T2865] kmem_cache_alloc+0x3b/0x320 [ 1077.634008][ T2865] ext4_init_io_end+0x29/0x130 [ 1077.638788][ T2865] ext4_writepages+0xbda/0x30a0 [ 1077.643713][ T2865] ? ____kasan_slab_free+0x13d/0x180 [ 1077.649031][ T2865] ? __kasan_slab_free+0x11/0x20 [ 1077.653993][ T2865] ? __cfi_ext4_writepages+0x10/0x10 [ 1077.659309][ T2865] ? kfree_skb_list_reason+0x47/0x70 [ 1077.664621][ T2865] ? kfree_skb_reason+0xdc/0x230 [ 1077.669592][ T2865] ? kfree_skb_list_reason+0x5b/0x70 [ 1077.674902][ T2865] ? __cfi____update_load_sum+0x10/0x10 [ 1077.680492][ T2865] ? __kasan_check_write+0x14/0x20 [ 1077.685627][ T2865] ? __switch_to+0x56f/0x1070 [ 1077.690364][ T2865] ? __cfi_ext4_writepages+0x10/0x10 [ 1077.695681][ T2865] do_writepages+0x3ab/0x600 [ 1077.700299][ T2865] ? _raw_spin_unlock+0x4c/0x70 [ 1077.705173][ T2865] ? finish_task_switch+0x16b/0x7c0 [ 1077.710388][ T2865] ? __cfi_do_writepages+0x10/0x10 [ 1077.715511][ T2865] ? __schedule+0xbea/0x14b0 [ 1077.720129][ T2865] ? __kasan_check_write+0x14/0x20 [ 1077.725359][ T2865] ? _raw_spin_lock+0x94/0xf0 [ 1077.730055][ T2865] __writeback_single_inode+0xd9/0xb10 [ 1077.735537][ T2865] ? wbc_attach_and_unlock_inode+0xce/0x500 [ 1077.741452][ T2865] writeback_sb_inodes+0x9fd/0x1610 [ 1077.746708][ T2865] ? queue_io+0x4b0/0x4b0 [ 1077.751058][ T2865] ? down_read_trylock+0x27f/0x660 [ 1077.756200][ T2865] __writeback_inodes_wb+0x127/0x400 [ 1077.761510][ T2865] wb_writeback+0x3ff/0x990 [ 1077.766038][ T2865] ? inode_cgwb_move_to_attached+0x3b0/0x3b0 [ 1077.772038][ T2865] ? set_worker_desc+0x1ba/0x1f0 [ 1077.777018][ T2865] ? __kasan_check_write+0x14/0x20 [ 1077.782193][ T2865] wb_workfn+0xa32/0xeb0 [ 1077.786458][ T2865] ? __cfi_wb_workfn+0x10/0x10 [ 1077.791238][ T2865] ? __this_cpu_preempt_check+0x13/0x20 [ 1077.796798][ T2865] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 1077.803588][ T2865] ? probe_sched_wakeup+0x5e/0x90 [ 1077.808644][ T2865] ? probe_sched_wakeup+0x71/0x90 [ 1077.813671][ T2865] ? ttwu_do_activate+0x179/0x2a0 [ 1077.818706][ T2865] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1077.824526][ T2865] ? try_to_wake_up+0x622/0x1250 [ 1077.829475][ T2865] process_one_work+0x717/0xc30 [ 1077.834410][ T2865] worker_thread+0xa4d/0x11d0 [ 1077.839110][ T2865] kthread+0x281/0x320 [ 1077.843197][ T2865] ? __cfi_worker_thread+0x10/0x10 [ 1077.848332][ T2865] ? __cfi_kthread+0x10/0x10 [ 1077.852940][ T2865] ret_from_fork+0x1f/0x30 [ 1077.857389][ T2865] [ 1077.860429][T15998] CPU: 0 PID: 15998 Comm: udevd Tainted: G W syzkaller #0 [ 1077.868984][T15998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1077.879065][T15998] Call Trace: [ 1077.882358][T15998] [ 1077.885301][T15998] __dump_stack+0x21/0x24 [ 1077.889644][T15998] dump_stack_lvl+0x110/0x170 [ 1077.894333][T15998] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1077.899380][T15998] dump_stack+0x15/0x24 [ 1077.903553][T15998] should_fail_ex+0x3bf/0x510 [ 1077.908266][T15998] ? __sigqueue_alloc+0x13f/0x210 [ 1077.913310][T15998] __should_failslab+0xac/0xf0 [ 1077.918481][T15998] should_failslab+0x9/0x20 [ 1077.923007][T15998] kmem_cache_alloc+0x3b/0x320 [ 1077.927797][T15998] __sigqueue_alloc+0x13f/0x210 [ 1077.932696][T15998] __send_signal_locked+0x19d/0xb70 [ 1077.937911][T15998] ? __task_pid_nr_ns+0x1e2/0x280 [ 1077.942962][T15998] do_notify_parent+0x6b1/0x820 [ 1077.947833][T15998] ? __cfi_do_notify_parent+0x10/0x10 [ 1077.953223][T15998] ? __cfi__raw_write_lock_irq+0x10/0x10 [ 1077.958897][T15998] ? kill_orphaned_pgrp+0x173/0x570 [ 1077.964143][T15998] do_exit+0x176d/0x2850 [ 1077.968399][T15998] ? __cfi_do_exit+0x10/0x10 [ 1077.973015][T15998] ? __kasan_check_write+0x14/0x20 [ 1077.978146][T15998] ? _raw_spin_lock_irq+0x95/0xf0 [ 1077.983182][T15998] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1077.988745][T15998] ? zap_other_threads+0x2c1/0x2f0 [ 1077.993877][T15998] do_group_exit+0x21b/0x2e0 [ 1077.998553][T15998] __x64_sys_exit_group+0x3f/0x40 [ 1078.003616][T15998] x64_sys_call+0x7b4/0x9a0 [ 1078.008132][T15998] do_syscall_64+0x4c/0xa0 [ 1078.012571][T15998] ? clear_bhb_loop+0x30/0x80 [ 1078.017276][T15998] ? clear_bhb_loop+0x30/0x80 [ 1078.021981][T15998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1078.027914][T15998] RIP: 0033:0x7f2fd32f16c5 [ 1078.032349][T15998] Code: Unable to access opcode bytes at 0x7f2fd32f169b. [ 1078.039371][T15998] RSP: 002b:00007ffcf46a1fa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1078.047817][T15998] RAX: ffffffffffffffda RBX: 0000560b480094a0 RCX: 00007f2fd32f16c5 [ 1078.055809][T15998] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1078.063834][T15998] RBP: 0000560b47dd42c0 R08: 0000000000000000 R09: 0000000000000000 [ 1078.071814][T15998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1078.079900][T15998] R13: 00007ffcf46a1ff0 R14: 0000000000000000 R15: 0000000000000000 [ 1078.087895][T15998] [ 1078.091216][ T103] FAULT_INJECTION: forcing a failure. [ 1078.091216][ T103] name failslab, interval 1, probability 10, space 0, times 88 [ 1078.098643][T12074] CPU: 1 PID: 12074 Comm: syz-executor Tainted: G W syzkaller #0 [ 1078.113107][T12074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1078.123174][T12074] Call Trace: [ 1078.126467][T12074] [ 1078.129413][T12074] __dump_stack+0x21/0x24 [ 1078.133767][T12074] dump_stack_lvl+0x110/0x170 [ 1078.138472][T12074] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1078.143515][T12074] ? selinux_capable+0x2b6/0x3b0 [ 1078.148485][T12074] ? __cfi_selinux_capable+0x10/0x10 [ 1078.153784][T12074] dump_stack+0x15/0x24 [ 1078.157969][T12074] should_fail_ex+0x3bf/0x510 [ 1078.162659][T12074] ? getname_flags+0xba/0x510 [ 1078.167347][T12074] __should_failslab+0xac/0xf0 [ 1078.172131][T12074] should_failslab+0x9/0x20 [ 1078.176651][T12074] kmem_cache_alloc+0x3b/0x320 [ 1078.181436][T12074] getname_flags+0xba/0x510 [ 1078.185948][T12074] getname+0x19/0x20 [ 1078.189854][T12074] do_sys_openat2+0xeb/0x820 [ 1078.194468][T12074] ? user_path_at_empty+0x162/0x1c0 [ 1078.199710][T12074] ? __cfi_path_umount+0x10/0x10 [ 1078.204672][T12074] ? do_sys_open+0xe0/0xe0 [ 1078.209107][T12074] ? __x64_sys_umount+0x12d/0x170 [ 1078.214169][T12074] __x64_sys_openat+0x136/0x160 [ 1078.219043][T12074] x64_sys_call+0x783/0x9a0 [ 1078.223565][T12074] do_syscall_64+0x4c/0xa0 [ 1078.228022][T12074] ? clear_bhb_loop+0x30/0x80 [ 1078.232718][T12074] ? clear_bhb_loop+0x30/0x80 [ 1078.237416][T12074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1078.243328][T12074] RIP: 0033:0x7f82abf9d2bc [ 1078.247752][T12074] Code: 4c 89 54 24 18 41 89 f2 41 83 e2 40 75 40 89 f0 f7 d0 a9 00 00 41 00 74 35 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 44 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 1078.267365][T12074] RSP: 002b:00007fff2033a6b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1078.275813][T12074] RAX: ffffffffffffffda RBX: 00007f82ac034314 RCX: 00007f82abf9d2bc [ 1078.283812][T12074] RDX: 0000000000090800 RSI: 00007fff2033b8c0 RDI: 00000000ffffff9c [ 1078.291799][T12074] RBP: 00007fff2033b8c0 R08: 00007fff2033c8c0 R09: 00000000ffffffff [ 1078.299778][T12074] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff2033b8c0 [ 1078.307755][T12074] R13: 00007f82ac034314 R14: 00000000000ff183 R15: 00007fff2033c990 [ 1078.315734][T12074] [ 1078.318777][T17847] CPU: 0 PID: 17847 Comm: syz.9.5888 Tainted: G W syzkaller #0 [ 1078.327745][T17847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1078.337819][T17847] Call Trace: [ 1078.341284][T17847] [ 1078.344237][T17847] __dump_stack+0x21/0x24 [ 1078.348585][T17847] dump_stack_lvl+0x110/0x170 [ 1078.353280][T17847] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1078.358323][T17847] dump_stack+0x15/0x24 [ 1078.362505][T17847] should_fail_ex+0x3bf/0x510 [ 1078.367197][T17847] ? taskstats_exit+0x1f0/0xb10 [ 1078.372155][T17847] __should_failslab+0xac/0xf0 [ 1078.376941][T17847] should_failslab+0x9/0x20 [ 1078.381465][T17847] kmem_cache_alloc+0x3b/0x320 [ 1078.386249][T17847] taskstats_exit+0x1f0/0xb10 [ 1078.390952][T17847] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 1078.396863][T17847] ? acct_update_integrals+0x32b/0x370 [ 1078.402365][T17847] ? __cfi_taskstats_exit+0x10/0x10 [ 1078.407566][T17847] ? __kasan_check_write+0x14/0x20 [ 1078.412683][T17847] do_exit+0x89e/0x2850 [ 1078.416854][T17847] ? __schedule+0xbea/0x14b0 [ 1078.421463][T17847] ? __cfi_do_exit+0x10/0x10 [ 1078.426072][T17847] ? plist_check_list+0x255/0x270 [ 1078.431122][T17847] ? _raw_spin_lock+0x94/0xf0 [ 1078.435824][T17847] ? __kasan_check_write+0x14/0x20 [ 1078.440972][T17847] ? _raw_spin_lock_irq+0x95/0xf0 [ 1078.446025][T17847] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1078.451588][T17847] do_group_exit+0x21b/0x2e0 [ 1078.456206][T17847] ? __kasan_check_write+0x14/0x20 [ 1078.461327][T17847] ? recalc_sigpending+0x180/0x1c0 [ 1078.466459][T17847] get_signal+0x167c/0x1700 [ 1078.470989][T17847] ? __cfi_get_signal+0x10/0x10 [ 1078.475899][T17847] arch_do_signal_or_restart+0xd1/0x11c0 [ 1078.481547][T17847] ? do_futex+0x2e2/0x430 [ 1078.485900][T17847] ? __cfi_do_futex+0x10/0x10 [ 1078.490590][T17847] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1078.496772][T17847] ? __se_sys_futex+0x136/0x310 [ 1078.501632][T17847] ? __kasan_check_write+0x14/0x20 [ 1078.506748][T17847] exit_to_user_mode_loop+0x7a/0xb0 [ 1078.511958][T17847] exit_to_user_mode_prepare+0x87/0xd0 [ 1078.517450][T17847] syscall_exit_to_user_mode+0x1a/0x30 [ 1078.522917][T17847] do_syscall_64+0x58/0xa0 [ 1078.527342][T17847] ? clear_bhb_loop+0x30/0x80 [ 1078.532029][T17847] ? clear_bhb_loop+0x30/0x80 [ 1078.536719][T17847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1078.542631][T17847] RIP: 0033:0x7ff964d9df99 [ 1078.547056][T17847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.566710][T17847] RSP: 002b:00007ff965cda0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1078.575133][T17847] RAX: fffffffffffffe00 RBX: 00007ff965026098 RCX: 00007ff964d9df99 [ 1078.583128][T17847] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff965026098 [ 1078.591123][T17847] RBP: 00007ff965026090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.599103][T17847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1078.607093][T17847] R13: 00007ff965026128 R14: 00007ffec888ec50 R15: 00007ffec888ed38 [ 1078.615100][T17847] [ 1078.618141][ T141] CPU: 1 PID: 141 Comm: dhcpcd Tainted: G W syzkaller #0 [ 1078.626578][ T141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1078.636653][ T141] Call Trace: [ 1078.639948][ T141] [ 1078.642888][ T141] __dump_stack+0x21/0x24 [ 1078.647237][ T141] dump_stack_lvl+0x110/0x170 [ 1078.651930][ T141] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1078.656966][ T141] ? psi_task_change+0x1c1/0x340 [ 1078.661921][ T141] dump_stack+0x15/0x24 [ 1078.666107][ T141] should_fail_ex+0x3bf/0x510 [ 1078.670798][ T141] __should_failslab+0xac/0xf0 [ 1078.675581][ T141] should_failslab+0x9/0x20 [ 1078.680097][ T141] kmem_cache_alloc_node+0x42/0x330 [ 1078.685320][ T141] ? __alloc_skb+0xe8/0x4a0 [ 1078.689869][ T141] __alloc_skb+0xe8/0x4a0 [ 1078.694227][ T141] alloc_skb_with_frags+0xa8/0x620 [ 1078.699355][ T141] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1078.705175][ T141] ? avc_has_perm_noaudit+0x390/0x490 [ 1078.710568][ T141] sock_alloc_send_pskb+0x87f/0x9a0 [ 1078.715785][ T141] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 1078.721517][ T141] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 1078.727254][ T141] ? __kasan_check_write+0x14/0x20 [ 1078.732380][ T141] ? _raw_spin_lock+0x94/0xf0 [ 1078.737088][ T141] ? __cfi__raw_spin_lock+0x10/0x10 [ 1078.742304][ T141] ? avc_has_perm+0x163/0x250 [ 1078.747001][ T141] unix_dgram_sendmsg+0x5c1/0x1710 [ 1078.752234][ T141] ? selinux_socket_sendmsg+0x22f/0x340 [ 1078.757798][ T141] ? avc_has_perm+0x163/0x250 [ 1078.762487][ T141] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 1078.768074][ T141] unix_seqpacket_sendmsg+0x118/0x1e0 [ 1078.773467][ T141] sock_write_iter+0x2ea/0x3f0 [ 1078.778246][ T141] ? __cfi_sock_write_iter+0x10/0x10 [ 1078.783165][T17857] ------------[ cut here ]------------ [ 1078.783566][ T141] ? fsnotify_perm+0x67/0x5b0 [ 1078.789028][T17857] kernel BUG at mm/mmap.c:2854! [ 1078.789792][T17857] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1078.793739][ T141] ? security_file_permission+0x8a/0xb0 [ 1078.798615][T17857] CPU: 0 PID: 17857 Comm: syz.6.5897 Tainted: G W syzkaller #0 [ 1078.804671][ T141] do_iter_write+0x65a/0xb30 [ 1078.810200][T17857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1078.819121][ T141] ? _copy_from_user+0x8f/0xc0 [ 1078.823708][T17857] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 1078.833763][ T141] ? vfs_iter_write+0xa0/0xa0 [ 1078.838530][T17857] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 69 46 09 00 e9 d2 f9 ff ff e8 ef ba c3 ff 0f 0b e8 e8 ba c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 1078.843898][ T141] ? import_iovec+0x7c/0xb0 [ 1078.848582][T17857] RSP: 0018:ffffc90002a87a40 EFLAGS: 00010293 [ 1078.868187][ T141] vfs_writev+0x339/0x5f0 [ 1078.872679][T17857] [ 1078.872686][T17857] RAX: ffffffff81adab58 RBX: 00007f80c1b33000 RCX: ffff88810e429440 [ 1078.878750][ T141] ? do_writev+0x2c0/0x2c0 [ 1078.883083][T17857] RDX: 0000000000000000 RSI: 00007f80c1b32fff RDI: 00007f80c1b33000 [ 1078.885421][ T141] ? __kasan_check_read+0x11/0x20 [ 1078.893398][T17857] RBP: ffffc90002a87c30 R08: ffff88810e429440 R09: 0000000000000003 [ 1078.897821][ T141] ? __fdget_pos+0x1f2/0x380 [ 1078.905801][T17857] R10: 0000000000000003 R11: 0000000000000000 R12: 00007f80c1b32fff [ 1078.910830][ T141] do_writev+0x14e/0x2c0 [ 1078.918805][T17857] R13: 00007f80c1b33000 R14: dffffc0000000000 R15: 00007f80c1b12000 [ 1078.923393][ T141] ? do_readv+0x450/0x450 [ 1078.931367][T17857] FS: 000055557d7c6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1078.935617][ T141] ? __secure_computing+0xea/0x290 [ 1078.943602][T17857] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1078.947935][ T141] __x64_sys_writev+0x7d/0x90 [ 1078.956867][T17857] CR2: 0000560b4801d950 CR3: 000000011bce6000 CR4: 00000000003526b0 [ 1078.961976][ T141] x64_sys_call+0xad/0x9a0 [ 1078.968562][T17857] DR0: 0000000000000007 DR1: ffffffffff7fff00 DR2: 4000000000010022 [ 1078.973348][ T141] do_syscall_64+0x4c/0xa0 [ 1078.981341][T17857] DR3: fffffffffffffff6 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1078.985840][ T141] ? clear_bhb_loop+0x30/0x80 [ 1078.993884][T17857] Call Trace: [ 1078.993893][T17857] [ 1078.998301][ T141] ? clear_bhb_loop+0x30/0x80 [ 1079.006269][T17857] ? __kasan_check_write+0x14/0x20 [ 1079.010939][ T141] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1079.014223][T17857] ? __cfi_mmap_region+0x10/0x10 [ 1079.017156][ T141] RIP: 0033:0x7f1256774407 [ 1079.021833][T17857] ? cap_mmap_addr+0x165/0x2e0 [ 1079.026953][ T141] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1079.032851][T17857] ? get_unmapped_area+0x30c/0x370 [ 1079.037777][ T141] RSP: 002b:00007ffdc109ccf0 EFLAGS: 00000202 [ 1079.042193][T17857] do_mmap+0x858/0xdd0 [ 1079.046970][ T141] ORIG_RAX: 0000000000000014 [ 1079.066601][T17857] ? __cfi_do_mmap+0x10/0x10 [ 1079.071708][ T141] RAX: ffffffffffffffda RBX: 00007f12566ea740 RCX: 00007f1256774407 [ 1079.077795][T17857] ? do_futex+0x2bf/0x430 [ 1079.081873][ T141] RDX: 0000000000000005 RSI: 00007ffdc109cd50 RDI: 000000000000000a [ 1079.086552][T17857] ? _copy_from_user+0x8f/0xc0 [ 1079.091236][ T141] RBP: 0000560d181525d0 R08: 0000000000000000 R09: 0000000000000000 [ 1079.099216][T17857] vm_mmap_pgoff+0x206/0x3f0 [ 1079.103547][ T141] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560d181525d0 [ 1079.111540][T17857] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 1079.116305][ T141] R13: 000000000000012c R14: 00000000ffffffff R15: 0000000000000000 [ 1079.124279][T17857] ? __x64_sys_futex+0x100/0x100 [ 1079.128902][ T141] [ 1079.136868][T17857] ? xfd_validate_state+0x70/0x150 [ 1079.163073][T17857] ksys_mmap_pgoff+0xf6/0x1d0 [ 1079.167790][T17857] __x64_sys_mmap+0xfa/0x110 [ 1079.172401][T17857] x64_sys_call+0x8fd/0x9a0 [ 1079.176924][T17857] do_syscall_64+0x4c/0xa0 [ 1079.181381][T17857] ? clear_bhb_loop+0x30/0x80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1079.186088][T17857] ? clear_bhb_loop+0x30/0x80 [ 1079.190879][T17857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1079.196810][T17857] RIP: 0033:0x7f80c0b9dd02 [ 1079.201251][T17857] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 1079.220877][T17857] RSP: 002b:00007ffed7fd4f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1079.223538][ T28] audit: type=1400 audit(1785416109.904:666): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[14488]" dev="pipefs" ino=14488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1079.229312][T17857] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f80c0b9dd02 [ 1079.229328][T17857] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1079.268382][T17857] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 1079.276373][T17857] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffed7fd50e0 [ 1079.284365][T17857] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 1079.292362][T17857] [ 1079.295392][T17857] Modules linked in: [ 1079.304751][ T92] CPU: 0 PID: 92 Comm: klogd Tainted: G D W syzkaller #0 [ 1079.305907][ T278] FAULT_INJECTION: forcing a failure. [ 1079.305907][ T278] name failslab, interval 1, probability 10, space 0, times 86 [ 1079.313024][ T92] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1079.313038][ T92] Call Trace: [ 1079.313044][ T92] [ 1079.313052][ T92] __dump_stack+0x21/0x24 [ 1079.332132][ T39] FAULT_INJECTION: forcing a failure. [ 1079.332132][ T39] name failslab, interval 1, probability 10, space 0, times 85 [ 1079.335911][ T92] dump_stack_lvl+0x110/0x170 [ 1079.363916][ T92] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1079.368954][ T92] dump_stack+0x15/0x24 [ 1079.373126][ T92] should_fail_ex+0x3bf/0x510 [ 1079.377817][ T92] __should_failslab+0xac/0xf0 [ 1079.382597][ T92] should_failslab+0x9/0x20 [ 1079.387114][ T92] kmem_cache_alloc_node+0x42/0x330 [ 1079.392344][ T92] ? __alloc_skb+0xe8/0x4a0 [ 1079.396876][ T92] __alloc_skb+0xe8/0x4a0 [ 1079.401220][ T92] alloc_skb_with_frags+0xa8/0x620 [ 1079.406346][ T92] ? memcpy+0x56/0x70 [ 1079.410341][ T92] sock_alloc_send_pskb+0x87f/0x9a0 [ 1079.415580][ T92] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 1079.421316][ T92] ? __kasan_check_write+0x14/0x20 [ 1079.426434][ T92] ? _raw_spin_lock+0x94/0xf0 [ 1079.431136][ T92] ? __cfi__raw_spin_lock+0x10/0x10 [ 1079.436351][ T92] unix_dgram_sendmsg+0x5c1/0x1710 [ 1079.441490][ T92] ? selinux_socket_sendmsg+0x22f/0x340 [ 1079.447052][ T92] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 1079.452959][ T92] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 1079.458543][ T92] ? security_socket_sendmsg+0x93/0xb0 [ 1079.464024][ T92] __sys_sendto+0x4ac/0x660 [ 1079.468541][ T92] ? __cfi___sys_sendto+0x10/0x10 [ 1079.473591][ T92] ? __cfi_do_syslog+0x10/0x10 [ 1079.478449][ T92] ? user_return_notifier_unregister+0x182/0x1b0 [ 1079.484789][ T92] ? __this_cpu_preempt_check+0x13/0x20 [ 1079.490352][ T92] ? xfd_validate_state+0x70/0x150 [ 1079.495484][ T92] __x64_sys_sendto+0xe5/0x100 [ 1079.500263][ T92] x64_sys_call+0x83/0x9a0 [ 1079.504688][ T92] do_syscall_64+0x4c/0xa0 [ 1079.509154][ T92] ? clear_bhb_loop+0x30/0x80 [ 1079.513850][ T92] ? clear_bhb_loop+0x30/0x80 [ 1079.518546][ T92] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1079.524462][ T92] RIP: 0033:0x7f14a45a2407 [ 1079.528911][ T92] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1079.548527][ T92] RSP: 002b:00007fff4035f9e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1079.556959][ T92] RAX: ffffffffffffffda RBX: 00007f14a4452c80 RCX: 00007f14a45a2407 [ 1079.564977][ T92] RDX: 000000000000003d RSI: 00007fff4035fb20 RDI: 0000000000000003 [ 1079.572971][ T92] RBP: 00007fff4035ff50 R08: 0000000000000000 R09: 0000000000000000 [ 1079.580958][ T92] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff4035ff68 [ 1079.588945][ T92] R13: 00007fff4035fb20 R14: 0000000000000022 R15: 00007fff4035fb20 [ 1079.596975][ T92] [ 1079.600012][ T39] CPU: 1 PID: 39 Comm: kworker/1:1 Tainted: G D W syzkaller #0 [ 1079.608900][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1079.618975][ T39] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 1079.625068][ T39] Call Trace: [ 1079.628356][ T39] [ 1079.631298][ T39] __dump_stack+0x21/0x24 [ 1079.635637][ T39] dump_stack_lvl+0x110/0x170 [ 1079.640325][ T39] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1079.645360][ T39] ? kasan_set_track+0x60/0x70 [ 1079.650159][ T39] ? skb_network_protocol+0x52f/0x790 [ 1079.655550][ T39] dump_stack+0x15/0x24 [ 1079.659722][ T39] should_fail_ex+0x3bf/0x510 [ 1079.664428][ T39] ? skb_clone+0x1e8/0x380 [ 1079.668851][ T39] __should_failslab+0xac/0xf0 [ 1079.673628][ T39] should_failslab+0x9/0x20 [ 1079.678142][ T39] kmem_cache_alloc+0x3b/0x320 [ 1079.682923][ T39] skb_clone+0x1e8/0x380 [ 1079.687185][ T39] dev_queue_xmit_nit+0x245/0xab0 [ 1079.692221][ T39] dev_hard_start_xmit+0x15f/0x730 [ 1079.697351][ T39] __dev_queue_xmit+0x1989/0x3540 [ 1079.702388][ T39] ? kmem_cache_free+0x12d/0x300 [ 1079.707345][ T39] ? __dev_queue_xmit+0x281/0x3540 [ 1079.712491][ T39] ? __cfi___dev_queue_xmit+0x10/0x10 [ 1079.717884][ T39] ? __local_bh_enable_ip+0x58/0x80 [ 1079.723096][ T39] ? __dev_queue_xmit+0x1205/0x3540 [ 1079.728312][ T39] ? __local_bh_enable_ip+0x58/0x80 [ 1079.733537][ T39] ? ip6t_do_table+0x13a7/0x1560 [ 1079.738599][ T39] ? __kasan_check_read+0x11/0x20 [ 1079.743633][ T39] ? selinux_ip_postroute+0x28c/0x1000 [ 1079.749142][ T39] ? memcpy+0x56/0x70 [ 1079.753131][ T39] ip6_finish_output2+0x15d2/0x18b0 [ 1079.758357][ T39] ? ip6t_do_table+0x1c7/0x1560 [ 1079.763240][ T39] ? __cfi_ip6_finish_output2+0x10/0x10 [ 1079.768805][ T39] ? ip6table_mangle_hook+0x262/0x7b0 [ 1079.774205][ T39] ip6_finish_output+0x60b/0xbe0 [ 1079.779171][ T39] ip6_output+0x1fa/0x410 [ 1079.783522][ T39] ? __cfi_ip6_output+0x10/0x10 [ 1079.788387][ T39] ? __cfi_ip6_finish_output+0x10/0x10 [ 1079.793871][ T39] ? __cfi_ip6t_do_table+0x10/0x10 [ 1079.799008][ T39] ip6_local_out+0x211/0x3d0 [ 1079.803607][ T39] ? __cfi_ip6_local_out+0x10/0x10 [ 1079.808736][ T39] ? __cfi_dst_output+0x10/0x10 [ 1079.813619][ T39] ? udp6_set_csum+0x9ab/0xf10 [ 1079.818412][ T39] udp_tunnel6_xmit_skb+0x4d4/0x900 [ 1079.823663][ T39] send6+0x49c/0x690 [ 1079.827589][ T39] ? send6+0x229/0x690 [ 1079.831678][ T39] ? send4+0x9d0/0x9d0 [ 1079.835771][ T39] wg_socket_send_skb_to_peer+0x114/0x1d0 [ 1079.841528][ T39] wg_packet_tx_worker+0x1ce/0x500 [ 1079.846675][ T39] process_one_work+0x717/0xc30 [ 1079.851545][ T39] worker_thread+0xa4d/0x11d0 [ 1079.856243][ T39] kthread+0x281/0x320 [ 1079.860338][ T39] ? __cfi_worker_thread+0x10/0x10 [ 1079.865505][ T39] ? __cfi_kthread+0x10/0x10 [ 1079.870110][ T39] ret_from_fork+0x1f/0x30 [ 1079.874548][ T39] [ 1079.877585][ T103] CPU: 0 PID: 103 Comm: udevd Tainted: G D W syzkaller #0 [ 1079.885980][ T103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1079.896058][ T103] Call Trace: [ 1079.899363][ T103] [ 1079.902314][ T103] __dump_stack+0x21/0x24 [ 1079.906671][ T103] dump_stack_lvl+0x110/0x170 [ 1079.911376][ T103] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1079.916432][ T103] ? memcpy+0x56/0x70 [ 1079.920451][ T103] dump_stack+0x15/0x24 [ 1079.924641][ T103] should_fail_ex+0x3bf/0x510 [ 1079.929349][ T103] __should_failslab+0xac/0xf0 [ 1079.934174][ T103] should_failslab+0x9/0x20 [ 1079.938694][ T103] slab_pre_alloc_hook+0x30/0x1d0 [ 1079.943743][ T103] kmem_cache_alloc_lru+0x49/0x280 [ 1079.948868][ T103] ? __d_alloc+0x34/0x6d0 [ 1079.953237][ T103] __d_alloc+0x34/0x6d0 [ 1079.957409][ T103] d_alloc+0x48/0x260 [ 1079.961421][ T103] ? lookup_one_qstr_excl+0xb6/0x270 [ 1079.966725][ T103] lookup_one_qstr_excl+0xcb/0x270 [ 1079.971861][ T103] do_unlinkat+0x194/0x6c0 [ 1079.976307][ T103] ? __cfi_do_unlinkat+0x10/0x10 [ 1079.981258][ T103] ? getname_flags+0x205/0x510 [ 1079.986032][ T103] __x64_sys_unlink+0x49/0x50 [ 1079.990733][ T103] x64_sys_call+0x958/0x9a0 [ 1079.995251][ T103] do_syscall_64+0x4c/0xa0 [ 1079.999674][ T103] ? clear_bhb_loop+0x30/0x80 [ 1080.004356][ T103] ? clear_bhb_loop+0x30/0x80 [ 1080.009068][ T103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1080.014984][ T103] RIP: 0033:0x7f2fd3315937 [ 1080.019418][ T103] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 1080.039041][ T103] RSP: 002b:00007ffcf46a2158 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 1080.047466][ T103] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f2fd3315937 [ 1080.055455][ T103] RDX: 0000000000000000 RSI: 00007ffcf46a2240 RDI: 0000560b24b9702e [ 1080.063439][ T103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1080.071419][ T103] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560b48016c70 [ 1080.079428][ T103] R13: 0000560b24bb2100 R14: 0000560b24b97008 R15: 0000000000000000 [ 1080.087420][ T103] [ 1080.090659][ T278] CPU: 0 PID: 278 Comm: sshd-session Tainted: G D W syzkaller #0 [ 1080.099619][ T278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1080.109692][ T278] Call Trace: [ 1080.112983][ T278] [ 1080.115961][ T278] __dump_stack+0x21/0x24 [ 1080.120346][ T278] dump_stack_lvl+0x110/0x170 [ 1080.125043][ T278] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1080.130087][ T278] ? is_bpf_text_address+0x177/0x190 [ 1080.135532][ T278] ? kernel_text_address+0xa0/0xd0 [ 1080.140682][ T278] dump_stack+0x15/0x24 [ 1080.144900][ T278] should_fail_ex+0x3bf/0x510 [ 1080.149715][ T278] __should_failslab+0xac/0xf0 [ 1080.154505][ T278] should_failslab+0x9/0x20 [ 1080.159032][ T278] kmem_cache_alloc_node+0x42/0x330 [ 1080.164257][ T278] ? __alloc_skb+0xe8/0x4a0 [ 1080.168802][ T278] __alloc_skb+0xe8/0x4a0 [ 1080.173161][ T278] alloc_skb_with_frags+0xa8/0x620 [ 1080.178292][ T278] ? memcpy+0x56/0x70 [ 1080.182299][ T278] sock_alloc_send_pskb+0x87f/0x9a0 [ 1080.187525][ T278] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 1080.193268][ T278] ? __kasan_check_write+0x14/0x20 [ 1080.198424][ T278] ? _raw_spin_lock+0x94/0xf0 [ 1080.203130][ T278] ? __cfi__raw_spin_lock+0x10/0x10 [ 1080.208354][ T278] unix_dgram_sendmsg+0x5c1/0x1710 [ 1080.213489][ T278] ? selinux_socket_sendmsg+0x22f/0x340 [ 1080.219047][ T278] ? __cfi_lockref_put_or_lock+0x10/0x10 [ 1080.224727][ T278] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 1080.230631][ T278] ? selinux_socket_unix_may_send+0x1e6/0x2c0 [ 1080.236712][ T278] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 1080.242279][ T278] ? security_socket_sendmsg+0x93/0xb0 [ 1080.247755][ T278] __sys_sendto+0x4ac/0x660 [ 1080.252274][ T278] ? __cfi___sys_sendto+0x10/0x10 [ 1080.257344][ T278] ? security_unix_may_send+0x8c/0xb0 [ 1080.262729][ T278] ? __sys_connect+0x267/0x460 [ 1080.267510][ T278] __x64_sys_sendto+0xe5/0x100 [ 1080.272288][ T278] x64_sys_call+0x83/0x9a0 [ 1080.276722][ T278] do_syscall_64+0x4c/0xa0 [ 1080.281156][ T278] ? clear_bhb_loop+0x30/0x80 [ 1080.285838][ T278] ? clear_bhb_loop+0x30/0x80 [ 1080.290533][ T278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1080.296440][ T278] RIP: 0033:0x7f40ad6a7407 [ 1080.300869][ T278] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1080.320495][ T278] RSP: 002b:00007ffe9f91f370 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1080.328927][ T278] RAX: ffffffffffffffda RBX: 00007f40adde6300 RCX: 00007f40ad6a7407 [ 1080.336916][ T278] RDX: 0000000000000070 RSI: 00007ffe9f91f4b0 RDI: 0000000000000006 [ 1080.344897][ T278] RBP: 00007ffe9f91f8e0 R08: 0000000000000000 R09: 0000000000000000 [ 1080.352900][ T278] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffe9f91f8f8 [ 1080.360882][ T278] R13: 00007ffe9f91f4b0 R14: 0000000000000049 R15: 00007ffe9f91f4b0 [ 1080.368867][ T278] [ 1080.372115][ T1] FAULT_INJECTION: forcing a failure. [ 1080.372115][ T1] name failslab, interval 1, probability 10, space 0, times 81 [ 1080.373132][T17618] FAULT_INJECTION: forcing a failure. [ 1080.373132][T17618] name failslab, interval 1, probability 10, space 0, times 81 [ 1080.385236][ T1] CPU: 1 PID: 1 Comm: init Tainted: G D W syzkaller #0 [ 1080.405749][ T1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1080.415807][ T1] Call Trace: [ 1080.419095][ T1] [ 1080.422041][ T1] __dump_stack+0x21/0x24 [ 1080.426392][ T1] dump_stack_lvl+0x110/0x170 [ 1080.431092][ T1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1080.436133][ T1] dump_stack+0x15/0x24 [ 1080.440333][ T1] should_fail_ex+0x3bf/0x510 [ 1080.445023][ T1] __should_failslab+0xac/0xf0 [ 1080.449818][ T1] should_failslab+0x9/0x20 [ 1080.454332][ T1] __kmem_cache_alloc_node+0x3d/0x2d0 [ 1080.459728][ T1] ? security_prepare_creds+0x4e/0x150 [ 1080.465203][ T1] ? security_prepare_creds+0x4e/0x150 [ 1080.470685][ T1] __kmalloc+0xa4/0x1e0 [ 1080.474873][ T1] security_prepare_creds+0x4e/0x150 [ 1080.480176][ T1] prepare_creds+0x428/0x610 [ 1080.484792][ T1] do_faccessat+0xe8/0x9b0 [ 1080.489221][ T1] ? stream_open+0x60/0x60 [ 1080.493660][ T1] ? fpregs_restore_userregs+0x128/0x260 [ 1080.499362][ T1] __x64_sys_access+0x61/0x70 [ 1080.504059][ T1] x64_sys_call+0x5a0/0x9a0 [ 1080.508601][ T1] do_syscall_64+0x4c/0xa0 [ 1080.513033][ T1] ? clear_bhb_loop+0x30/0x80 [ 1080.517721][ T1] ? clear_bhb_loop+0x30/0x80 [ 1080.522416][ T1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1080.528353][ T1] RIP: 0033:0x7f93d77902c7 [ 1080.532783][ T1] Code: 0f 1f 00 8b 87 10 01 00 00 89 06 31 c0 c3 0f 1f 44 00 00 89 b7 10 01 00 00 31 c0 c3 0f 1f 80 00 00 00 00 b8 15 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 01 fb 0d 00 f7 d8 64 89 02 b8 [ 1080.552413][ T1] RSP: 002b:00007ffc43d62df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1080.560829][ T1] RAX: ffffffffffffffda RBX: 00007f93d78340b7 RCX: 00007f93d77902c7 [ 1080.568815][ T1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 00007f93d78340b7 [ 1080.576795][ T1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1080.584775][ T1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1080.592758][ T1] R13: 0000000000000000 R14: 0000000000002f27 R15: 0000561f7890ad98 [ 1080.600741][ T1] [ 1080.603781][T17618] CPU: 0 PID: 17618 Comm: syz-executor Tainted: G D W syzkaller #0 [ 1080.612920][T17618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1080.622996][T17618] Call Trace: [ 1080.626296][T17618] [ 1080.629251][T17618] __dump_stack+0x21/0x24 [ 1080.633610][T17618] dump_stack_lvl+0x110/0x170 [ 1080.638349][T17618] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1080.643402][T17618] ? sprintf+0xe4/0x140 [ 1080.647593][T17618] dump_stack+0x15/0x24 [ 1080.651772][T17618] should_fail_ex+0x3bf/0x510 [ 1080.656472][T17618] __should_failslab+0xac/0xf0 [ 1080.661266][T17618] should_failslab+0x9/0x20 [ 1080.665791][T17618] kmem_cache_alloc_node+0x42/0x330 [ 1080.671027][T17618] ? __alloc_skb+0xe8/0x4a0 [ 1080.671517][T17613] FAULT_INJECTION: forcing a failure. [ 1080.671517][T17613] name failslab, interval 1, probability 10, space 0, times 80 [ 1080.675557][T17618] __alloc_skb+0xe8/0x4a0 [ 1080.692678][T17618] inet6_rt_notify+0x34d/0x520 [ 1080.697532][T17618] ? fib6_purge_rt+0x5d9/0x660 [ 1080.702324][T17618] ? atomic_notifier_call_chain+0x108/0x120 [ 1080.708251][T17618] ? __cfi_inet6_rt_notify+0x10/0x10 [ 1080.713542][T17618] ? call_fib_notifiers+0xa0/0xc0 [ 1080.718677][T17618] fib6_del+0xb88/0xef0 [ 1080.722869][T17618] ? __cfi_fib6_del+0x10/0x10 [ 1080.727573][T17618] ? fib6_ifdown+0x2e8/0x4e0 [ 1080.732186][T17618] fib6_clean_node+0x2af/0x550 [ 1080.736982][T17618] ? __cfi_fib6_clean_node+0x10/0x10 [ 1080.742291][T17618] fib6_walk_continue+0x55d/0x760 [ 1080.747339][T17618] fib6_walk+0x153/0x290 [ 1080.751652][T17618] fib6_clean_all+0x1a1/0x270 [ 1080.756379][T17618] ? probe_sched_wakeup+0x5e/0x90 [ 1080.761424][T17618] ? __cfi_fib6_ifdown+0x10/0x10 [ 1080.766380][T17618] ? __cfi_fib6_clean_all+0x10/0x10 [ 1080.771613][T17618] ? __cfi_fib6_clean_node+0x10/0x10 [ 1080.776919][T17618] ? __cfi_fib6_ifdown+0x10/0x10 [ 1080.781872][T17618] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1080.787705][T17618] rt6_disable_ip+0x123/0x8e0 [ 1080.792398][T17618] ? insert_work+0x26c/0x300 [ 1080.796999][T17618] ? __queue_work+0x9f2/0xd50 [ 1080.801718][T17618] ? __cfi_rt6_disable_ip+0x10/0x10 [ 1080.806927][T17618] ? __kasan_check_read+0x11/0x20 [ 1080.811965][T17618] addrconf_ifdown+0x15d/0x1950 [ 1080.816824][T17618] ? do_syscall_64+0x4c/0xa0 [ 1080.821435][T17618] ? __kasan_kmalloc+0x95/0xb0 [ 1080.826223][T17618] ? nf_nat_masq_schedule+0x23c/0x500 [ 1080.831675][T17618] ? addrconf_cleanup+0x130/0x130 [ 1080.836718][T17618] ? __kasan_check_write+0x14/0x20 [ 1080.841847][T17618] ? mutex_unlock+0x8f/0x230 [ 1080.846460][T17618] ? __cfi_mutex_unlock+0x10/0x10 [ 1080.851501][T17618] ? __cfi_device_cmp+0x10/0x10 [ 1080.856355][T17618] ? masq_device_event+0xd0/0xd0 [ 1080.861316][T17618] addrconf_notify+0x39f/0xe30 [ 1080.866098][T17618] raw_notifier_call_chain+0xa1/0x110 [ 1080.871483][T17618] dev_close_many+0x325/0x4d0 [ 1080.876265][T17618] ? __cfi_dev_close_many+0x10/0x10 [ 1080.881486][T17618] ? wake_up_process+0x10/0x20 [ 1080.886274][T17618] ? __kasan_check_read+0x11/0x20 [ 1080.891318][T17618] unregister_netdevice_many+0x43f/0x1910 [ 1080.897072][T17618] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 1080.903252][T17618] ? __queue_delayed_work+0x188/0x200 [ 1080.908673][T17618] ? queue_delayed_work_on+0x10d/0x160 [ 1080.914178][T17618] ? linkwatch_fire_event+0x1dc/0x240 [ 1080.919646][T17618] ? __kasan_check_read+0x11/0x20 [ 1080.924691][T17618] unregister_netdevice_queue+0x2e1/0x320 [ 1080.930447][T17618] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 1080.936718][T17618] ? linkwatch_fire_event+0x208/0x240 [ 1080.942114][T17618] __tun_detach+0xc9d/0x1450 [ 1080.946796][T17618] tun_chr_close+0x92/0x140 [ 1080.951319][T17618] ? __cfi_tun_chr_close+0x10/0x10 [ 1080.956444][T17618] __fput+0x1fd/0x8f0 [ 1080.960453][T17618] ____fput+0x15/0x20 [ 1080.964456][T17618] task_work_run+0x1e1/0x250 [ 1080.969154][T17618] ? __cfi_task_work_run+0x10/0x10 [ 1080.974277][T17618] ? free_nsproxy+0x21f/0x270 [ 1080.978977][T17618] do_exit+0xaf2/0x2850 [ 1080.983163][T17618] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 1080.988380][T17618] ? __cfi_do_exit+0x10/0x10 [ 1080.992989][T17618] ? __kasan_check_write+0x14/0x20 [ 1080.998131][T17618] ? _raw_spin_lock_irq+0x95/0xf0 [ 1081.003165][T17618] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1081.008725][T17618] ? xfd_validate_state+0x70/0x150 [ 1081.013859][T17618] ? zap_other_threads+0x2c1/0x2f0 [ 1081.018993][T17618] do_group_exit+0x21b/0x2e0 [ 1081.023603][T17618] __x64_sys_exit_group+0x3f/0x40 [ 1081.028647][T17618] x64_sys_call+0x7b4/0x9a0 [ 1081.033168][T17618] do_syscall_64+0x4c/0xa0 [ 1081.037617][T17618] ? clear_bhb_loop+0x30/0x80 [ 1081.042325][T17618] ? clear_bhb_loop+0x30/0x80 [ 1081.047020][T17618] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1081.052957][T17618] RIP: 0033:0x7fac5979df99 [ 1081.057382][T17618] Code: Unable to access opcode bytes at 0x7fac5979df6f. [ 1081.064405][T17618] RSP: 002b:00007ffd1887dcc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1081.072843][T17618] RAX: ffffffffffffffda RBX: 00007fac59834320 RCX: 00007fac5979df99 [ 1081.080829][T17618] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1081.089008][T17618] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fac59834314 [ 1081.097004][T17618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1887ef20 [ 1081.104991][T17618] R13: 00007fac59834314 R14: 00000000000fe964 R15: 00007ffd1887ef60 [ 1081.112986][T17618] [ 1081.116019][T17613] CPU: 1 PID: 17613 Comm: syz-executor Tainted: G D W syzkaller #0 [ 1081.116792][ C0] FAULT_INJECTION: forcing a failure. [ 1081.116792][ C0] name failslab, interval 1, probability 10, space 0, times 79 [ 1081.125149][T17613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1081.125162][T17613] Call Trace: [ 1081.125168][T17613] [ 1081.125175][T17613] __dump_stack+0x21/0x24 [ 1081.158555][T17613] dump_stack_lvl+0x110/0x170 [ 1081.163263][T17613] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1081.168328][T17613] dump_stack+0x15/0x24 [ 1081.172499][T17613] should_fail_ex+0x3bf/0x510 [ 1081.177226][T17613] ? __sigqueue_alloc+0x13f/0x210 [ 1081.182279][T17613] __should_failslab+0xac/0xf0 [ 1081.187077][T17613] should_failslab+0x9/0x20 [ 1081.191589][T17613] kmem_cache_alloc+0x3b/0x320 [ 1081.196367][T17613] __sigqueue_alloc+0x13f/0x210 [ 1081.201241][T17613] __send_signal_locked+0x19d/0xb70 [ 1081.206452][T17613] ? __task_pid_nr_ns+0x1e2/0x280 [ 1081.211490][T17613] do_notify_parent+0x6b1/0x820 [ 1081.216451][T17613] ? __cfi_do_notify_parent+0x10/0x10 [ 1081.221851][T17613] ? group_send_sig_info+0x2b7/0x2e0 [ 1081.227158][T17613] ? __cfi_group_send_sig_info+0x10/0x10 [ 1081.232818][T17613] ? kill_orphaned_pgrp+0x169/0x570 [ 1081.238029][T17613] do_exit+0x176d/0x2850 [ 1081.242292][T17613] ? __cfi_do_exit+0x10/0x10 [ 1081.246906][T17613] ? wait_consider_task+0x11c0/0x2890 [ 1081.252313][T17613] ? __kasan_check_write+0x14/0x20 [ 1081.257448][T17613] ? _raw_spin_lock_irq+0x95/0xf0 [ 1081.262502][T17613] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1081.268075][T17613] do_group_exit+0x21b/0x2e0 [ 1081.272685][T17613] ? __kasan_check_write+0x14/0x20 [ 1081.277811][T17613] ? recalc_sigpending+0x180/0x1c0 [ 1081.282953][T17613] get_signal+0x167c/0x1700 [ 1081.287493][T17613] ? __cfi_get_signal+0x10/0x10 [ 1081.292360][T17613] ? put_pid+0xc5/0x120 [ 1081.296527][T17613] arch_do_signal_or_restart+0xd1/0x11c0 [ 1081.302177][T17613] ? __cfi_child_wait_callback+0x10/0x10 [ 1081.307820][T17613] ? __x64_sys_wait4+0x1b4/0x230 [ 1081.312770][T17613] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1081.319103][T17613] ? __cfi___x64_sys_wait4+0x10/0x10 [ 1081.324413][T17613] ? do_user_addr_fault+0x9a5/0x1030 [ 1081.329724][T17613] exit_to_user_mode_loop+0x7a/0xb0 [ 1081.334955][T17613] exit_to_user_mode_prepare+0x87/0xd0 [ 1081.340435][T17613] syscall_exit_to_user_mode+0x1a/0x30 [ 1081.345944][T17613] do_syscall_64+0x58/0xa0 [ 1081.350389][T17613] ? clear_bhb_loop+0x30/0x80 [ 1081.355103][T17613] ? clear_bhb_loop+0x30/0x80 [ 1081.359798][T17613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1081.365720][T17613] RIP: 0033:0x7fac59759117 [ 1081.370236][T17613] Code: Unable to access opcode bytes at 0x7fac597590ed. [ 1081.377268][T17613] RSP: 002b:00007ffd1887f050 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 1081.385711][T17613] RAX: fffffffffffffe00 RBX: 000055557f0d9500 RCX: 00007fac59759117 [ 1081.393701][T17613] RDX: 0000000040000000 RSI: 00007ffd1887f0ac RDI: ffffffffffffffff [ 1081.401685][T17613] RBP: 00007ffd1887f0ac R08: 0000000000000000 R09: 0000000000000000 [ 1081.409669][T17613] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1081.417650][T17613] R13: 0000000000000003 R14: 00007ffd1887f308 R15: 0000000000000000 [ 1081.425654][T17613] [ 1081.428681][ C0] CPU: 0 PID: 17618 Comm: syz-executor Tainted: G D W syzkaller #0 [ 1081.437817][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1081.447884][ C0] Call Trace: [ 1081.451172][ C0] [ 1081.454033][ C0] __dump_stack+0x21/0x24 [ 1081.458380][ C0] dump_stack_lvl+0x110/0x170 [ 1081.463067][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1081.468097][ C0] ? calc_wheel_index+0x1b5/0x8d0 [ 1081.473150][ C0] ? timer_update_keys+0xb0/0xb0 [ 1081.478104][ C0] dump_stack+0x15/0x24 [ 1081.482273][ C0] should_fail_ex+0x3bf/0x510 [ 1081.486967][ C0] __should_failslab+0xac/0xf0 [ 1081.491755][ C0] should_failslab+0x9/0x20 [ 1081.496270][ C0] kmem_cache_alloc_node+0x42/0x330 [ 1081.501492][ C0] ? __alloc_skb+0xe8/0x4a0 [ 1081.506010][ C0] __alloc_skb+0xe8/0x4a0 [ 1081.510348][ C0] ndisc_send_rs+0x31d/0x870 [ 1081.514942][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 1081.519899][ C0] addrconf_rs_timer+0x35a/0x600 [ 1081.524880][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1081.530346][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 1081.535381][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1081.540941][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1081.546422][ C0] call_timer_fn+0x46/0x2a0 [ 1081.550939][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1081.556414][ C0] __run_timers+0x646/0x9b0 [ 1081.560933][ C0] ? calc_index+0x200/0x200 [ 1081.565449][ C0] ? sched_clock+0x9/0x10 [ 1081.569796][ C0] run_timer_softirq+0x6a/0xf0 [ 1081.574572][ C0] handle_softirqs+0x1d7/0x600 [ 1081.579350][ C0] __do_softirq+0xb/0xd [ 1081.583536][ C0] do_softirq+0xdc/0x130 [ 1081.587790][ C0] [ 1081.590730][ C0] [ 1081.593672][ C0] ? __cfi_do_softirq+0x10/0x10 [ 1081.598532][ C0] ? __local_bh_enable_ip+0x58/0x80 [ 1081.603739][ C0] __local_bh_enable_ip+0x75/0x80 [ 1081.608775][ C0] _raw_spin_unlock_bh+0x50/0x60 [ 1081.613730][ C0] fib6_clean_all+0x1c9/0x270 [ 1081.618422][ C0] ? probe_sched_wakeup+0x5e/0x90 [ 1081.623459][ C0] ? __cfi_fib6_ifdown+0x10/0x10 [ 1081.628398][ C0] ? __cfi_fib6_clean_all+0x10/0x10 [ 1081.633620][ C0] ? __cfi_fib6_clean_node+0x10/0x10 [ 1081.638921][ C0] ? __cfi_fib6_ifdown+0x10/0x10 [ 1081.643870][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1081.649691][ C0] rt6_disable_ip+0x123/0x8e0 [ 1081.654383][ C0] ? insert_work+0x26c/0x300 [ 1081.658985][ C0] ? __queue_work+0x9f2/0xd50 [ 1081.663685][ C0] ? __cfi_rt6_disable_ip+0x10/0x10 [ 1081.668888][ C0] ? __kasan_check_read+0x11/0x20 [ 1081.673923][ C0] addrconf_ifdown+0x15d/0x1950 [ 1081.678784][ C0] ? do_syscall_64+0x4c/0xa0 [ 1081.683383][ C0] ? __kasan_kmalloc+0x95/0xb0 [ 1081.688156][ C0] ? nf_nat_masq_schedule+0x23c/0x500 [ 1081.691441][ C1] FAULT_INJECTION: forcing a failure. [ 1081.691441][ C1] name failslab, interval 1, probability 10, space 0, times 78 [ 1081.693545][ C0] ? addrconf_cleanup+0x130/0x130 [ 1081.711330][ C0] ? __kasan_check_write+0x14/0x20 [ 1081.716457][ C0] ? mutex_unlock+0x8f/0x230 [ 1081.721087][ C0] ? __cfi_mutex_unlock+0x10/0x10 [ 1081.726133][ C0] ? __cfi_device_cmp+0x10/0x10 [ 1081.731001][ C0] ? masq_device_event+0xd0/0xd0 [ 1081.735962][ C0] addrconf_notify+0x39f/0xe30 [ 1081.740765][ C0] raw_notifier_call_chain+0xa1/0x110 [ 1081.746165][ C0] dev_close_many+0x325/0x4d0 [ 1081.750862][ C0] ? __cfi_dev_close_many+0x10/0x10 [ 1081.756074][ C0] ? wake_up_process+0x10/0x20 [ 1081.760855][ C0] ? __kasan_check_read+0x11/0x20 [ 1081.765924][ C0] unregister_netdevice_many+0x43f/0x1910 [ 1081.771678][ C0] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 1081.777846][ C0] ? __queue_delayed_work+0x188/0x200 [ 1081.783229][ C0] ? queue_delayed_work_on+0x10d/0x160 [ 1081.788703][ C0] ? linkwatch_fire_event+0x1dc/0x240 [ 1081.794097][ C0] ? __kasan_check_read+0x11/0x20 [ 1081.799222][ C0] unregister_netdevice_queue+0x2e1/0x320 [ 1081.804966][ C0] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 1081.811219][ C0] ? linkwatch_fire_event+0x208/0x240 [ 1081.816606][ C0] __tun_detach+0xc9d/0x1450 [ 1081.821220][ C0] tun_chr_close+0x92/0x140 [ 1081.825746][ C0] ? __cfi_tun_chr_close+0x10/0x10 [ 1081.830890][ C0] __fput+0x1fd/0x8f0 [ 1081.834887][ C0] ____fput+0x15/0x20 [ 1081.838893][ C0] task_work_run+0x1e1/0x250 [ 1081.843507][ C0] ? __cfi_task_work_run+0x10/0x10 [ 1081.848633][ C0] ? free_nsproxy+0x21f/0x270 [ 1081.853331][ C0] do_exit+0xaf2/0x2850 [ 1081.857503][ C0] ? lock_vma_under_rcu+0x3f8/0x4f0 [ 1081.862713][ C0] ? __cfi_do_exit+0x10/0x10 [ 1081.867321][ C0] ? __kasan_check_write+0x14/0x20 [ 1081.872448][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 1081.877486][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1081.883057][ C0] ? xfd_validate_state+0x70/0x150 [ 1081.888194][ C0] ? zap_other_threads+0x2c1/0x2f0 [ 1081.893333][ C0] do_group_exit+0x21b/0x2e0 [ 1081.897960][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1081.903019][ C0] x64_sys_call+0x7b4/0x9a0 [ 1081.907550][ C0] do_syscall_64+0x4c/0xa0 [ 1081.912001][ C0] ? clear_bhb_loop+0x30/0x80 [ 1081.916701][ C0] ? clear_bhb_loop+0x30/0x80 [ 1081.921398][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1081.927316][ C0] RIP: 0033:0x7fac5979df99 [ 1081.931747][ C0] Code: Unable to access opcode bytes at 0x7fac5979df6f. [ 1081.938795][ C0] RSP: 002b:00007ffd1887dcc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1081.947228][ C0] RAX: ffffffffffffffda RBX: 00007fac59834320 RCX: 00007fac5979df99 [ 1081.955220][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1081.963198][ C0] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fac59834314 [ 1081.971205][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1887ef20 [ 1081.979188][ C0] R13: 00007fac59834314 R14: 00000000000fe964 R15: 00007ffd1887ef60 [ 1081.987171][ C0] [ 1081.990245][ C1] CPU: 1 PID: 468 Comm: kworker/1:5 Tainted: G D W syzkaller #0 [ 1081.999129][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1082.009201][ C1] Workqueue: events drain_vmap_area_work [ 1082.014874][ C1] Call Trace: [ 1082.018171][ C1] [ 1082.021028][ C1] __dump_stack+0x21/0x24 [ 1082.025377][ C1] dump_stack_lvl+0x110/0x170 [ 1082.030158][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1082.035200][ C1] ? drain_vmap_area_work+0x3e/0xd0 [ 1082.040415][ C1] ? worker_thread+0xa4d/0x11d0 [ 1082.045324][ C1] ? skb_network_protocol+0x52f/0x790 [ 1082.050714][ C1] dump_stack+0x15/0x24 [ 1082.054886][ C1] should_fail_ex+0x3bf/0x510 [ 1082.059577][ C1] ? skb_clone+0x1e8/0x380 [ 1082.064018][ C1] __should_failslab+0xac/0xf0 [ 1082.068805][ C1] should_failslab+0x9/0x20 [ 1082.073327][ C1] kmem_cache_alloc+0x3b/0x320 [ 1082.078108][ C1] skb_clone+0x1e8/0x380 [ 1082.082364][ C1] dev_queue_xmit_nit+0x245/0xab0 [ 1082.087408][ C1] dev_hard_start_xmit+0x15f/0x730 [ 1082.092546][ C1] __dev_queue_xmit+0x1989/0x3540 [ 1082.097593][ C1] ? __dev_queue_xmit+0x281/0x3540 [ 1082.102730][ C1] ? ret_from_fork+0x1f/0x30 [ 1082.107342][ C1] ? __cfi___dev_queue_xmit+0x10/0x10 [ 1082.112767][ C1] ? __local_bh_enable_ip+0x58/0x80 [ 1082.117983][ C1] ? ip6t_do_table+0x13a7/0x1560 [ 1082.122940][ C1] ? __kasan_check_read+0x11/0x20 [ 1082.127976][ C1] ? selinux_ip_postroute+0x28c/0x1000 [ 1082.133455][ C1] ? memcpy+0x56/0x70 [ 1082.137457][ C1] ip6_finish_output2+0x15d2/0x18b0 [ 1082.142697][ C1] ? ip6t_do_table+0x1c7/0x1560 [ 1082.147591][ C1] ? __cfi_ip6_finish_output2+0x10/0x10 [ 1082.153157][ C1] ? ip6table_mangle_hook+0x262/0x7b0 [ 1082.158564][ C1] ip6_finish_output+0x60b/0xbe0 [ 1082.162775][T17829] FAULT_INJECTION: forcing a failure. [ 1082.162775][T17829] name failslab, interval 1, probability 10, space 0, times 75 [ 1082.163550][ C1] ip6_output+0x1fa/0x410 [ 1082.180634][ C1] ? __cfi_ip6_output+0x10/0x10 [ 1082.185495][ C1] ? __cfi_ip6_finish_output+0x10/0x10 [ 1082.190969][ C1] ? __cfi_ip6t_do_table+0x10/0x10 [ 1082.196104][ C1] ndisc_send_skb+0x7c8/0xcd0 [ 1082.200799][ C1] ? __cfi_ndisc_send_skb+0x10/0x10 [ 1082.206011][ C1] ? __cfi_dst_output+0x10/0x10 [ 1082.210875][ C1] ? memcpy+0x56/0x70 [ 1082.214867][ C1] ? __ndisc_fill_addr_option+0xde/0x130 [ 1082.220508][ C1] ndisc_send_rs+0x66a/0x870 [ 1082.225117][ C1] addrconf_rs_timer+0x35a/0x600 [ 1082.230072][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1082.233001][ T2865] FAULT_INJECTION: forcing a failure. [ 1082.233001][ T2865] name failslab, interval 1, probability 10, space 0, times 67 [ 1082.235646][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 1082.253617][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1082.259186][ C1] ? wg_expired_retransmit_handshake+0xd8/0x250 [ 1082.265457][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1082.268524][ T555] FAULT_INJECTION: forcing a failure. [ 1082.268524][ T555] name failslab, interval 1, probability 10, space 0, times 67 [ 1082.270930][ C1] call_timer_fn+0x46/0x2a0 [ 1082.288196][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1082.293684][ C1] __run_timers+0x646/0x9b0 [ 1082.298210][ C1] ? calc_index+0x200/0x200 [ 1082.302730][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 1082.307948][ C1] run_timer_softirq+0x6a/0xf0 [ 1082.312732][ C1] handle_softirqs+0x1d7/0x600 [ 1082.317524][ C1] __irq_exit_rcu+0x52/0xf0 [ 1082.322040][ C1] irq_exit_rcu+0x9/0x10 [ 1082.326304][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1082.331957][ C1] [ 1082.334911][ C1] [ 1082.337857][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1082.343862][ C1] RIP: 0010:smp_call_function_many_cond+0x854/0x940 [ 1082.350499][ C1] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 77 72 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 43 6e 09 00 e9 38 ff ff ff f3 90 <41> 0f b6 44 1d 00 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff [ 1082.370127][ C1] RSP: 0018:ffffc9000e06f9e0 EFLAGS: 00000293 [ 1082.375669][ C0] FAULT_INJECTION: forcing a failure. [ 1082.375669][ C0] name failslab, interval 1, probability 10, space 0, times 66 [ 1082.376202][ C1] RAX: ffffffff8167f820 RBX: dffffc0000000000 RCX: ffff8881193be540 [ 1082.396930][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1082.404915][ C1] RBP: ffffc9000e06fb08 R08: ffff8881f6f390d7 R09: 1ffff1103ede721a [ 1082.412895][ C1] R10: 0000000000000000 R11: ffffffff8134b650 R12: 1ffff1103ede7218 [ 1082.420885][ C1] R13: 1ffff1103edc7ae1 R14: 0000000000000000 R15: ffff8881f6e3d708 [ 1082.428875][ C1] ? __cfi_x2apic_send_IPI+0x10/0x10 [ 1082.434184][ C1] ? smp_call_function_many_cond+0x870/0x940 [ 1082.440192][ C1] ? __cfi_do_kernel_range_flush+0x10/0x10 [ 1082.446018][ C1] ? smp_call_function_many+0x40/0x40 [ 1082.451402][ C1] ? __cfi_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 1082.457840][ C1] ? __cfi_do_kernel_range_flush+0x10/0x10 [ 1082.463655][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 1082.468809][ C1] flush_tlb_kernel_range+0x1a0/0x240 [ 1082.474216][ C1] kasan_release_vmalloc+0xa2/0xb0 [ 1082.479347][ C1] __purge_vmap_area_lazy+0xf09/0x1870 [ 1082.484816][ C1] ? __cfi___switch_to+0x10/0x10 [ 1082.489775][ C1] ? purge_fragmented_blocks_allcpus+0x7b0/0x7b0 [ 1082.496125][ C1] ? __schedule+0xbea/0x14b0 [ 1082.500733][ C1] drain_vmap_area_work+0x3e/0xd0 [ 1082.505771][ C1] process_one_work+0x717/0xc30 [ 1082.510636][ C1] worker_thread+0xa4d/0x11d0 [ 1082.515327][ C1] kthread+0x281/0x320 [ 1082.519421][ C1] ? __cfi_worker_thread+0x10/0x10 [ 1082.524563][ C1] ? __cfi_kthread+0x10/0x10 [ 1082.529169][ C1] ret_from_fork+0x1f/0x30 [ 1082.533606][ C1] [ 1082.536661][ C0] CPU: 0 PID: 2865 Comm: kworker/u4:9 Tainted: G D W syzkaller #0 [ 1082.537452][ C1] FAULT_INJECTION: forcing a failure. [ 1082.537452][ C1] name failslab, interval 1, probability 10, space 0, times 65 [ 1082.545721][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1082.568530][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 1082.575489][ C0] Call Trace: [ 1082.578775][ C0] [ 1082.581633][ C0] __dump_stack+0x21/0x24 [ 1082.585988][ C0] dump_stack_lvl+0x110/0x170 [ 1082.590682][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1082.595740][ C0] ? should_failslab+0x9/0x20 [ 1082.600434][ C0] ? __alloc_skb+0xe8/0x4a0 [ 1082.604979][ C0] ? skb_network_protocol+0x52f/0x790 [ 1082.610362][ C0] dump_stack+0x15/0x24 [ 1082.614536][ C0] should_fail_ex+0x3bf/0x510 [ 1082.619227][ C0] ? skb_clone+0x1e8/0x380 [ 1082.623655][ C0] __should_failslab+0xac/0xf0 [ 1082.628434][ C0] should_failslab+0x9/0x20 [ 1082.632955][ C0] kmem_cache_alloc+0x3b/0x320 [ 1082.637736][ C0] skb_clone+0x1e8/0x380 [ 1082.642007][ C0] dev_queue_xmit_nit+0x245/0xab0 [ 1082.647062][ C0] dev_hard_start_xmit+0x15f/0x730 [ 1082.652211][ C0] __dev_queue_xmit+0x1989/0x3540 [ 1082.657269][ C0] ? __dev_queue_xmit+0x281/0x3540 [ 1082.662404][ C0] ? ret_from_fork+0x1f/0x30 [ 1082.667013][ C0] ? __cfi___dev_queue_xmit+0x10/0x10 [ 1082.672422][ C0] ? __local_bh_enable_ip+0x58/0x80 [ 1082.677649][ C0] ? ip6t_do_table+0x13a7/0x1560 [ 1082.682618][ C0] ? __kasan_check_read+0x11/0x20 [ 1082.687669][ C0] ? selinux_ip_postroute+0x28c/0x1000 [ 1082.693153][ C0] ? memcpy+0x56/0x70 [ 1082.697166][ C0] ip6_finish_output2+0x15d2/0x18b0 [ 1082.702380][ C0] ? ip6t_do_table+0x1c7/0x1560 [ 1082.707259][ C0] ? __cfi_ip6_finish_output2+0x10/0x10 [ 1082.712839][ C0] ? ip6table_mangle_hook+0x262/0x7b0 [ 1082.718224][ C0] ip6_finish_output+0x60b/0xbe0 [ 1082.723183][ C0] ip6_output+0x1fa/0x410 [ 1082.727564][ C0] ? __cfi_ip6_output+0x10/0x10 [ 1082.732445][ C0] ? __cfi_ip6_finish_output+0x10/0x10 [ 1082.737912][ C0] ? __cfi_ip6t_do_table+0x10/0x10 [ 1082.743036][ C0] ndisc_send_skb+0x7c8/0xcd0 [ 1082.747720][ C0] ? __cfi_ndisc_send_skb+0x10/0x10 [ 1082.752930][ C0] ? __cfi_dst_output+0x10/0x10 [ 1082.757793][ C0] ? memcpy+0x56/0x70 [ 1082.761792][ C0] ? __ndisc_fill_addr_option+0xde/0x130 [ 1082.767438][ C0] ndisc_send_rs+0x66a/0x870 [ 1082.772050][ C0] addrconf_rs_timer+0x35a/0x600 [ 1082.777003][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1082.782582][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 1082.787617][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1082.793179][ C0] ? wg_expired_retransmit_handshake+0xd8/0x250 [ 1082.799448][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1082.804912][ C0] call_timer_fn+0x46/0x2a0 [ 1082.809429][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1082.814943][ C0] __run_timers+0x646/0x9b0 [ 1082.819473][ C0] ? calc_index+0x200/0x200 [ 1082.824007][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1082.829334][ C0] run_timer_softirq+0x6a/0xf0 [ 1082.834119][ C0] handle_softirqs+0x1d7/0x600 [ 1082.838898][ C0] __irq_exit_rcu+0x52/0xf0 [ 1082.843410][ C0] irq_exit_rcu+0x9/0x10 [ 1082.847694][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1082.853363][ C0] [ 1082.856309][ C0] [ 1082.859252][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1082.865277][ C0] RIP: 0010:__printk_cpu_sync_wait+0xb/0x40 [ 1082.871192][ C0] Code: 1d 5f 00 4c 89 33 5b 41 5c 41 5e 41 5f 5d c3 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 e8 17 92 19 00 f3 90 <48> c7 c7 c0 b9 11 87 be 04 00 00 00 e8 24 1f 5f 00 8b 05 7e e5 b9 [ 1082.890810][ C0] RSP: 0018:ffffc90000a8f950 EFLAGS: 00000293 [ 1082.896913][ C0] RAX: ffffffff8157d44c RBX: ffffffff860afda0 RCX: ffff888116e65100 [ 1082.904896][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8711b9c0 [ 1082.912878][ C0] RBP: ffffc90000a8f950 R08: 0000000000000003 R09: 0000000000000004 [ 1082.920870][ C0] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 1082.928848][ C0] R13: 0000000000000200 R14: dffffc0000000004 R15: 1ffff92000151f2c [ 1082.936830][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1082.942224][ C0] dump_stack_lvl+0xce/0x170 [ 1082.946828][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1082.951862][ C0] ? timer_update_keys+0xb0/0xb0 [ 1082.956810][ C0] ? debug_smp_processor_id+0x17/0x20 [ 1082.962195][ C0] dump_stack+0x15/0x24 [ 1082.966365][ C0] should_fail_ex+0x3bf/0x510 [ 1082.971077][ C0] __should_failslab+0xac/0xf0 [ 1082.975870][ C0] should_failslab+0x9/0x20 [ 1082.980415][ C0] kmem_cache_alloc_node+0x42/0x330 [ 1082.985641][ C0] ? __alloc_skb+0xe8/0x4a0 [ 1082.990164][ C0] __alloc_skb+0xe8/0x4a0 [ 1082.994507][ C0] wg_socket_send_buffer_to_peer+0x37/0x170 [ 1083.000451][ C0] ? ktime_get_coarse_with_offset+0x153/0x1a0 [ 1083.006665][ C0] wg_packet_handshake_send_worker+0x200/0x290 [ 1083.012841][ C0] ? __cfi_wg_packet_handshake_send_worker+0x10/0x10 [ 1083.019536][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1083.025361][ C0] ? try_to_wake_up+0x622/0x1250 [ 1083.030336][ C0] process_one_work+0x717/0xc30 [ 1083.035211][ C0] worker_thread+0xa4d/0x11d0 [ 1083.039911][ C0] kthread+0x281/0x320 [ 1083.043990][ C0] ? __cfi_worker_thread+0x10/0x10 [ 1083.049131][ C0] ? __cfi_kthread+0x10/0x10 [ 1083.053821][ C0] ret_from_fork+0x1f/0x30 [ 1083.058264][ C0] [ 1083.061313][ C1] CPU: 1 PID: 468 Comm: kworker/1:5 Tainted: G D W syzkaller #0 [ 1083.061399][ C0] FAULT_INJECTION: forcing a failure. [ 1083.061399][ C0] name failslab, interval 1, probability 10, space 0, times 64 [ 1083.070215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1083.070232][ C1] Workqueue: events drain_vmap_area_work [ 1083.098752][ C1] Call Trace: [ 1083.102045][ C1] [ 1083.104915][ C1] __dump_stack+0x21/0x24 [ 1083.109269][ C1] dump_stack_lvl+0x110/0x170 [ 1083.113962][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1083.119016][ C1] ? stack_trace_save+0xa6/0xf0 [ 1083.123911][ C1] dump_stack+0x15/0x24 [ 1083.128084][ C1] should_fail_ex+0x3bf/0x510 [ 1083.132773][ C1] ? dst_alloc+0x16a/0x1e0 [ 1083.137226][ C1] __should_failslab+0xac/0xf0 [ 1083.142007][ C1] should_failslab+0x9/0x20 [ 1083.146521][ C1] kmem_cache_alloc+0x3b/0x320 [ 1083.151395][ C1] ? handle_softirqs+0x1d7/0x600 [ 1083.156348][ C1] ? __irq_exit_rcu+0x52/0xf0 [ 1083.161037][ C1] ? __cfi_ip6_dst_gc+0x10/0x10 [ 1083.165917][ C1] dst_alloc+0x16a/0x1e0 [ 1083.170177][ C1] icmp6_dst_alloc+0xf8/0x510 [ 1083.174880][ C1] ndisc_send_skb+0x2ad/0xcd0 [ 1083.179570][ C1] ? __cfi_ndisc_send_skb+0x10/0x10 [ 1083.184860][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 1083.190418][ C1] ? __raise_softirq_irqoff+0x17/0xd0 [ 1083.195802][ C1] ? raise_softirq_irqoff+0x9/0x40 [ 1083.200932][ C1] ? rcu_read_unlock_special+0x384/0x450 [ 1083.206665][ C1] ? memcpy+0x56/0x70 [ 1083.210671][ C1] ? __ndisc_fill_addr_option+0xde/0x130 [ 1083.216326][ C1] ndisc_send_rs+0x66a/0x870 [ 1083.220939][ C1] addrconf_rs_timer+0x35a/0x600 [ 1083.225898][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1083.231372][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 1083.236420][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1083.241987][ C1] ? wg_expired_retransmit_handshake+0xd8/0x250 [ 1083.248249][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1083.253723][ C1] call_timer_fn+0x46/0x2a0 [ 1083.258245][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1083.263716][ C1] __run_timers+0x646/0x9b0 [ 1083.268237][ C1] ? calc_index+0x200/0x200 [ 1083.272758][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 1083.277977][ C1] run_timer_softirq+0x6a/0xf0 [ 1083.282755][ C1] handle_softirqs+0x1d7/0x600 [ 1083.287538][ C1] __irq_exit_rcu+0x52/0xf0 [ 1083.292050][ C1] irq_exit_rcu+0x9/0x10 [ 1083.296302][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1083.301959][ C1] [ 1083.304925][ C1] [ 1083.307868][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1083.313869][ C1] RIP: 0010:smp_call_function_many_cond+0x854/0x940 [ 1083.320485][ C1] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 77 72 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 43 6e 09 00 e9 38 ff ff ff f3 90 <41> 0f b6 44 1d 00 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff [ 1083.340121][ C1] RSP: 0018:ffffc9000e06f9e0 EFLAGS: 00000293 [ 1083.346198][ C1] RAX: ffffffff8167f820 RBX: dffffc0000000000 RCX: ffff8881193be540 [ 1083.354185][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1083.362176][ C1] RBP: ffffc9000e06fb08 R08: ffff8881f6f390d7 R09: 1ffff1103ede721a [ 1083.370159][ C1] R10: 0000000000000000 R11: ffffffff8134b650 R12: 1ffff1103ede7218 [ 1083.378141][ C1] R13: 1ffff1103edc7ae1 R14: 0000000000000000 R15: ffff8881f6e3d708 [ 1083.386153][ C1] ? __cfi_x2apic_send_IPI+0x10/0x10 [ 1083.391464][ C1] ? smp_call_function_many_cond+0x870/0x940 [ 1083.397481][ C1] ? __cfi_do_kernel_range_flush+0x10/0x10 [ 1083.403293][ C1] ? smp_call_function_many+0x40/0x40 [ 1083.408683][ C1] ? __cfi_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 1083.415122][ C1] ? __cfi_do_kernel_range_flush+0x10/0x10 [ 1083.420945][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 1083.426074][ C1] flush_tlb_kernel_range+0x1a0/0x240 [ 1083.431462][ C1] kasan_release_vmalloc+0xa2/0xb0 [ 1083.436587][ C1] __purge_vmap_area_lazy+0xf09/0x1870 [ 1083.442065][ C1] ? __cfi___switch_to+0x10/0x10 [ 1083.447017][ C1] ? purge_fragmented_blocks_allcpus+0x7b0/0x7b0 [ 1083.453365][ C1] ? __schedule+0xbea/0x14b0 [ 1083.458004][ C1] drain_vmap_area_work+0x3e/0xd0 [ 1083.463042][ C1] process_one_work+0x717/0xc30 [ 1083.467911][ C1] worker_thread+0xa4d/0x11d0 [ 1083.472608][ C1] kthread+0x281/0x320 [ 1083.476698][ C1] ? __cfi_worker_thread+0x10/0x10 [ 1083.481828][ C1] ? __cfi_kthread+0x10/0x10 [ 1083.486432][ C1] ret_from_fork+0x1f/0x30 [ 1083.490877][ C1] [ 1083.493908][ C0] CPU: 0 PID: 2865 Comm: kworker/u4:9 Tainted: G D W syzkaller #0 [ 1083.494790][ C1] FAULT_INJECTION: forcing a failure. [ 1083.494790][ C1] name failslab, interval 1, probability 10, space 0, times 63 [ 1083.502960][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1083.502976][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 1083.532734][ C0] Call Trace: [ 1083.536025][ C0] [ 1083.538882][ C0] __dump_stack+0x21/0x24 [ 1083.543244][ C0] dump_stack_lvl+0x110/0x170 [ 1083.547937][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1083.552992][ C0] ? calc_wheel_index+0x1b5/0x8d0 [ 1083.558032][ C0] ? timer_update_keys+0xb0/0xb0 [ 1083.562988][ C0] dump_stack+0x15/0x24 [ 1083.567174][ C0] should_fail_ex+0x3bf/0x510 [ 1083.571857][ C0] __should_failslab+0xac/0xf0 [ 1083.576657][ C0] should_failslab+0x9/0x20 [ 1083.581181][ C0] kmem_cache_alloc_node+0x42/0x330 [ 1083.586402][ C0] ? __alloc_skb+0xe8/0x4a0 [ 1083.590918][ C0] __alloc_skb+0xe8/0x4a0 [ 1083.595260][ C0] ndisc_send_rs+0x31d/0x870 [ 1083.599858][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 1083.604816][ C0] addrconf_rs_timer+0x35a/0x600 [ 1083.609761][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1083.615243][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 1083.620289][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1083.625848][ C0] ? wg_expired_retransmit_handshake+0xd8/0x250 [ 1083.632127][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1083.637610][ C0] call_timer_fn+0x46/0x2a0 [ 1083.642152][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1083.647653][ C0] __run_timers+0x646/0x9b0 [ 1083.652178][ C0] ? calc_index+0x200/0x200 [ 1083.656699][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1083.661920][ C0] run_timer_softirq+0x6a/0xf0 [ 1083.666696][ C0] handle_softirqs+0x1d7/0x600 [ 1083.671480][ C0] __irq_exit_rcu+0x52/0xf0 [ 1083.675996][ C0] irq_exit_rcu+0x9/0x10 [ 1083.680251][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1083.685900][ C0] [ 1083.688843][ C0] [ 1083.691790][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1083.697793][ C0] RIP: 0010:__printk_cpu_sync_wait+0xb/0x40 [ 1083.703701][ C0] Code: 1d 5f 00 4c 89 33 5b 41 5c 41 5e 41 5f 5d c3 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 e8 17 92 19 00 f3 90 <48> c7 c7 c0 b9 11 87 be 04 00 00 00 e8 24 1f 5f 00 8b 05 7e e5 b9 [ 1083.723404][ C0] RSP: 0018:ffffc90000a8f950 EFLAGS: 00000293 [ 1083.729479][ C0] RAX: ffffffff8157d44c RBX: ffffffff860afda0 RCX: ffff888116e65100 [ 1083.737468][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8711b9c0 [ 1083.745456][ C0] RBP: ffffc90000a8f950 R08: 0000000000000003 R09: 0000000000000004 [ 1083.753436][ C0] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 1083.761418][ C0] R13: 0000000000000200 R14: dffffc0000000004 R15: 1ffff92000151f2c [ 1083.769400][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1083.774799][ C0] dump_stack_lvl+0xce/0x170 [ 1083.779408][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1083.784459][ C0] ? timer_update_keys+0xb0/0xb0 [ 1083.789428][ C0] ? debug_smp_processor_id+0x17/0x20 [ 1083.794817][ C0] dump_stack+0x15/0x24 [ 1083.798980][ C0] should_fail_ex+0x3bf/0x510 [ 1083.803671][ C0] __should_failslab+0xac/0xf0 [ 1083.808463][ C0] should_failslab+0x9/0x20 [ 1083.812978][ C0] kmem_cache_alloc_node+0x42/0x330 [ 1083.818203][ C0] ? __alloc_skb+0xe8/0x4a0 [ 1083.822712][ C0] __alloc_skb+0xe8/0x4a0 [ 1083.827050][ C0] wg_socket_send_buffer_to_peer+0x37/0x170 [ 1083.832961][ C0] ? ktime_get_coarse_with_offset+0x153/0x1a0 [ 1083.839042][ C0] wg_packet_handshake_send_worker+0x200/0x290 [ 1083.845223][ C0] ? __cfi_wg_packet_handshake_send_worker+0x10/0x10 [ 1083.851914][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1083.857733][ C0] ? try_to_wake_up+0x622/0x1250 [ 1083.862708][ C0] process_one_work+0x717/0xc30 [ 1083.867572][ C0] worker_thread+0xa4d/0x11d0 [ 1083.872257][ C0] kthread+0x281/0x320 [ 1083.876336][ C0] ? __cfi_worker_thread+0x10/0x10 [ 1083.881460][ C0] ? __cfi_kthread+0x10/0x10 [ 1083.886084][ C0] ret_from_fork+0x1f/0x30 [ 1083.890528][ C0] [ 1083.893561][ C1] CPU: 1 PID: 468 Comm: kworker/1:5 Tainted: G D W syzkaller #0 [ 1083.893890][ C0] FAULT_INJECTION: forcing a failure. [ 1083.893890][ C0] name failslab, interval 1, probability 10, space 0, times 62 [ 1083.902444][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1083.925260][ C1] Workqueue: events drain_vmap_area_work [ 1083.930931][ C1] Call Trace: [ 1083.934236][ C1] [ 1083.937107][ C1] __dump_stack+0x21/0x24 [ 1083.941461][ C1] dump_stack_lvl+0x110/0x170 [ 1083.946165][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1083.951210][ C1] ? skb_network_protocol+0x52f/0x790 [ 1083.956613][ C1] dump_stack+0x15/0x24 [ 1083.960794][ C1] should_fail_ex+0x3bf/0x510 [ 1083.965504][ C1] ? skb_clone+0x1e8/0x380 [ 1083.969936][ C1] __should_failslab+0xac/0xf0 [ 1083.974716][ C1] should_failslab+0x9/0x20 [ 1083.979243][ C1] kmem_cache_alloc+0x3b/0x320 [ 1083.984033][ C1] skb_clone+0x1e8/0x380 [ 1083.988297][ C1] dev_queue_xmit_nit+0x245/0xab0 [ 1083.993354][ C1] dev_hard_start_xmit+0x15f/0x730 [ 1083.998516][ C1] __dev_queue_xmit+0x1989/0x3540 [ 1084.003561][ C1] ? __dev_queue_xmit+0x281/0x3540 [ 1084.008695][ C1] ? ret_from_fork+0x1f/0x30 [ 1084.013300][ C1] ? __cfi___dev_queue_xmit+0x10/0x10 [ 1084.018726][ C1] ? __local_bh_enable_ip+0x58/0x80 [ 1084.023930][ C1] ? ip6t_do_table+0x13a7/0x1560 [ 1084.028891][ C1] ? __kasan_check_read+0x11/0x20 [ 1084.033928][ C1] ? selinux_ip_postroute+0x28c/0x1000 [ 1084.039406][ C1] ? memcpy+0x56/0x70 [ 1084.043406][ C1] ip6_finish_output2+0x15d2/0x18b0 [ 1084.048651][ C1] ? ip6t_do_table+0x1c7/0x1560 [ 1084.053525][ C1] ? __cfi_ip6_finish_output2+0x10/0x10 [ 1084.059118][ C1] ? ip6table_mangle_hook+0x262/0x7b0 [ 1084.064504][ C1] ip6_finish_output+0x60b/0xbe0 [ 1084.069485][ C1] ip6_output+0x1fa/0x410 [ 1084.073833][ C1] ? __cfi_ip6_output+0x10/0x10 [ 1084.078704][ C1] ? __cfi_ip6_finish_output+0x10/0x10 [ 1084.084175][ C1] ? __cfi_ip6t_do_table+0x10/0x10 [ 1084.089307][ C1] ndisc_send_skb+0x7c8/0xcd0 [ 1084.094008][ C1] ? __cfi_ndisc_send_skb+0x10/0x10 [ 1084.099234][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 1084.104798][ C1] ? __cfi_dst_output+0x10/0x10 [ 1084.109658][ C1] ? rcu_read_unlock_special+0x384/0x450 [ 1084.115310][ C1] ? memcpy+0x56/0x70 [ 1084.119306][ C1] ? __ndisc_fill_addr_option+0xde/0x130 [ 1084.124959][ C1] ndisc_send_rs+0x66a/0x870 [ 1084.129563][ C1] addrconf_rs_timer+0x35a/0x600 [ 1084.134609][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1084.140087][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 1084.145126][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1084.150706][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1084.156181][ C1] call_timer_fn+0x46/0x2a0 [ 1084.160701][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1084.166171][ C1] __run_timers+0x646/0x9b0 [ 1084.170720][ C1] ? calc_index+0x200/0x200 [ 1084.175237][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 1084.180457][ C1] run_timer_softirq+0x6a/0xf0 [ 1084.185232][ C1] handle_softirqs+0x1d7/0x600 [ 1084.190016][ C1] __irq_exit_rcu+0x52/0xf0 [ 1084.194611][ C1] irq_exit_rcu+0x9/0x10 [ 1084.198868][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1084.204531][ C1] [ 1084.207552][ C1] [ 1084.210495][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1084.216496][ C1] RIP: 0010:smp_call_function_many_cond+0x854/0x940 [ 1084.223110][ C1] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 77 72 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 43 6e 09 00 e9 38 ff ff ff f3 90 <41> 0f b6 44 1d 00 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff [ 1084.242726][ C1] RSP: 0018:ffffc9000e06f9e0 EFLAGS: 00000293 [ 1084.248809][ C1] RAX: ffffffff8167f820 RBX: dffffc0000000000 RCX: ffff8881193be540 [ 1084.256794][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1084.264773][ C1] RBP: ffffc9000e06fb08 R08: ffff8881f6f390d7 R09: 1ffff1103ede721a [ 1084.272756][ C1] R10: 0000000000000000 R11: ffffffff8134b650 R12: 1ffff1103ede7218 [ 1084.280738][ C1] R13: 1ffff1103edc7ae1 R14: 0000000000000000 R15: ffff8881f6e3d708 [ 1084.288721][ C1] ? __cfi_x2apic_send_IPI+0x10/0x10 [ 1084.294035][ C1] ? smp_call_function_many_cond+0x870/0x940 [ 1084.300041][ C1] ? __cfi_do_kernel_range_flush+0x10/0x10 [ 1084.305868][ C1] ? smp_call_function_many+0x40/0x40 [ 1084.311278][ C1] ? __cfi_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 1084.317716][ C1] ? __cfi_do_kernel_range_flush+0x10/0x10 [ 1084.323532][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 1084.328660][ C1] flush_tlb_kernel_range+0x1a0/0x240 [ 1084.334065][ C1] kasan_release_vmalloc+0xa2/0xb0 [ 1084.339199][ C1] __purge_vmap_area_lazy+0xf09/0x1870 [ 1084.344673][ C1] ? __cfi___switch_to+0x10/0x10 [ 1084.349631][ C1] ? purge_fragmented_blocks_allcpus+0x7b0/0x7b0 [ 1084.355977][ C1] ? __schedule+0xbea/0x14b0 [ 1084.360594][ C1] drain_vmap_area_work+0x3e/0xd0 [ 1084.365672][ C1] process_one_work+0x717/0xc30 [ 1084.370539][ C1] worker_thread+0xa4d/0x11d0 [ 1084.375235][ C1] kthread+0x281/0x320 [ 1084.379431][ C1] ? __cfi_worker_thread+0x10/0x10 [ 1084.384565][ C1] ? __cfi_kthread+0x10/0x10 [ 1084.389163][ C1] ret_from_fork+0x1f/0x30 [ 1084.393618][ C1] [ 1084.396650][ C0] CPU: 0 PID: 2865 Comm: kworker/u4:9 Tainted: G D W syzkaller #0 [ 1084.405697][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1084.415762][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 1084.422711][ C0] Call Trace: [ 1084.425994][ C0] [ 1084.428844][ C0] __dump_stack+0x21/0x24 [ 1084.433187][ C0] dump_stack_lvl+0x110/0x170 [ 1084.437877][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1084.442916][ C0] ? should_failslab+0x9/0x20 [ 1084.447605][ C0] ? __alloc_skb+0xe8/0x4a0 [ 1084.452121][ C0] ? skb_network_protocol+0x52f/0x790 [ 1084.457507][ C0] dump_stack+0x15/0x24 [ 1084.461675][ C0] should_fail_ex+0x3bf/0x510 [ 1084.466365][ C0] ? skb_clone+0x1e8/0x380 [ 1084.470807][ C0] __should_failslab+0xac/0xf0 [ 1084.475593][ C0] should_failslab+0x9/0x20 [ 1084.480112][ C0] kmem_cache_alloc+0x3b/0x320 [ 1084.484913][ C0] skb_clone+0x1e8/0x380 [ 1084.489164][ C0] dev_queue_xmit_nit+0x245/0xab0 [ 1084.494204][ C0] dev_hard_start_xmit+0x15f/0x730 [ 1084.499374][ C0] __dev_queue_xmit+0x1989/0x3540 [ 1084.504416][ C0] ? __dev_queue_xmit+0x281/0x3540 [ 1084.509613][ C0] ? ret_from_fork+0x1f/0x30 [ 1084.514219][ C0] ? __cfi___dev_queue_xmit+0x10/0x10 [ 1084.519610][ C0] ? __local_bh_enable_ip+0x58/0x80 [ 1084.524819][ C0] ? ip6t_do_table+0x13a7/0x1560 [ 1084.529773][ C0] ? __kasan_check_read+0x11/0x20 [ 1084.534805][ C0] ? selinux_ip_postroute+0x28c/0x1000 [ 1084.540282][ C0] ? memcpy+0x56/0x70 [ 1084.544290][ C0] ip6_finish_output2+0x15d2/0x18b0 [ 1084.549524][ C0] ? ip6t_do_table+0x1c7/0x1560 [ 1084.554402][ C0] ? __cfi_ip6_finish_output2+0x10/0x10 [ 1084.559977][ C0] ? ip6table_mangle_hook+0x262/0x7b0 [ 1084.565368][ C0] ip6_finish_output+0x60b/0xbe0 [ 1084.570328][ C0] ip6_output+0x1fa/0x410 [ 1084.574687][ C0] ? __cfi_ip6_output+0x10/0x10 [ 1084.579572][ C0] ? __cfi_ip6_finish_output+0x10/0x10 [ 1084.585042][ C0] ? __cfi_ip6t_do_table+0x10/0x10 [ 1084.590173][ C0] ndisc_send_skb+0x7c8/0xcd0 [ 1084.594883][ C0] ? __cfi_ndisc_send_skb+0x10/0x10 [ 1084.600265][ C0] ? __cfi_dst_output+0x10/0x10 [ 1084.605211][ C0] ? memcpy+0x56/0x70 [ 1084.609208][ C0] ? __ndisc_fill_addr_option+0xde/0x130 [ 1084.614850][ C0] ndisc_send_rs+0x66a/0x870 [ 1084.619457][ C0] addrconf_rs_timer+0x35a/0x600 [ 1084.624403][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1084.629897][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 1084.634934][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1084.640503][ C0] ? wg_expired_retransmit_handshake+0xd8/0x250 [ 1084.646782][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1084.652255][ C0] call_timer_fn+0x46/0x2a0 [ 1084.656798][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1084.662267][ C0] __run_timers+0x646/0x9b0 [ 1084.666788][ C0] ? calc_index+0x200/0x200 [ 1084.671312][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1084.676529][ C0] run_timer_softirq+0x6a/0xf0 [ 1084.681312][ C0] handle_softirqs+0x1d7/0x600 [ 1084.686082][ C0] __irq_exit_rcu+0x52/0xf0 [ 1084.690599][ C0] irq_exit_rcu+0x9/0x10 [ 1084.694846][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1084.700497][ C0] [ 1084.703443][ C0] [ 1084.706387][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1084.712383][ C0] RIP: 0010:__printk_cpu_sync_wait+0xb/0x40 [ 1084.718324][ C0] Code: 1d 5f 00 4c 89 33 5b 41 5c 41 5e 41 5f 5d c3 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 e8 17 92 19 00 f3 90 <48> c7 c7 c0 b9 11 87 be 04 00 00 00 e8 24 1f 5f 00 8b 05 7e e5 b9 [ 1084.737964][ C0] RSP: 0018:ffffc90000a8f950 EFLAGS: 00000293 [ 1084.744045][ C0] RAX: ffffffff8157d44c RBX: ffffffff860afda0 RCX: ffff888116e65100 [ 1084.752049][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8711b9c0 [ 1084.760025][ C0] RBP: ffffc90000a8f950 R08: 0000000000000003 R09: 0000000000000004 [ 1084.768013][ C0] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 1084.775998][ C0] R13: 0000000000000200 R14: dffffc0000000004 R15: 1ffff92000151f2c [ 1084.783989][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1084.789385][ C0] dump_stack_lvl+0xce/0x170 [ 1084.794009][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1084.799047][ C0] ? timer_update_keys+0xb0/0xb0 [ 1084.803999][ C0] ? debug_smp_processor_id+0x17/0x20 [ 1084.809380][ C0] dump_stack+0x15/0x24 [ 1084.813557][ C0] should_fail_ex+0x3bf/0x510 [ 1084.818245][ C0] __should_failslab+0xac/0xf0 [ 1084.823033][ C0] should_failslab+0x9/0x20 [ 1084.827563][ C0] kmem_cache_alloc_node+0x42/0x330 [ 1084.832806][ C0] ? __alloc_skb+0xe8/0x4a0 [ 1084.837335][ C0] __alloc_skb+0xe8/0x4a0 [ 1084.841706][ C0] wg_socket_send_buffer_to_peer+0x37/0x170 [ 1084.847644][ C0] ? ktime_get_coarse_with_offset+0x153/0x1a0 [ 1084.853738][ C0] wg_packet_handshake_send_worker+0x200/0x290 [ 1084.860005][ C0] ? __cfi_wg_packet_handshake_send_worker+0x10/0x10 [ 1084.866705][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1084.872539][ C0] ? try_to_wake_up+0x622/0x1250 [ 1084.877516][ C0] process_one_work+0x717/0xc30 [ 1084.882376][ C0] worker_thread+0xa4d/0x11d0 [ 1084.887091][ C0] kthread+0x281/0x320 [ 1084.891189][ C0] ? __cfi_worker_thread+0x10/0x10 [ 1084.896324][ C0] ? __cfi_kthread+0x10/0x10 [ 1084.900936][ C0] ret_from_fork+0x1f/0x30 [ 1084.905379][ C0] [ 1084.909204][ T1] FAULT_INJECTION: forcing a failure. [ 1084.909204][ T1] name failslab, interval 1, probability 10, space 0, times 57 [ 1084.909211][ C0] FAULT_INJECTION: forcing a failure. [ 1084.909211][ C0] name failslab, interval 1, probability 10, space 0, times 57 [ 1084.909241][ C0] CPU: 0 PID: 2865 Comm: kworker/u4:9 Tainted: G D W syzkaller #0 [ 1084.943798][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1084.953865][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 1084.960831][ C0] Call Trace: [ 1084.964124][ C0] [ 1084.966984][ C0] __dump_stack+0x21/0x24 [ 1084.971375][ C0] dump_stack_lvl+0x110/0x170 [ 1084.976069][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1084.981112][ C0] ? __should_failslab+0xac/0xf0 [ 1084.986066][ C0] ? kmem_cache_alloc_node+0x42/0x330 [ 1084.991462][ C0] ? skb_network_protocol+0x52f/0x790 [ 1084.996884][ C0] dump_stack+0x15/0x24 [ 1085.001059][ C0] should_fail_ex+0x3bf/0x510 [ 1085.005742][ C0] ? skb_clone+0x1e8/0x380 [ 1085.010168][ C0] __should_failslab+0xac/0xf0 [ 1085.014942][ C0] should_failslab+0x9/0x20 [ 1085.019457][ C0] kmem_cache_alloc+0x3b/0x320 [ 1085.024249][ C0] skb_clone+0x1e8/0x380 [ 1085.028506][ C0] dev_queue_xmit_nit+0x245/0xab0 [ 1085.033545][ C0] dev_hard_start_xmit+0x15f/0x730 [ 1085.038681][ C0] __dev_queue_xmit+0x1989/0x3540 [ 1085.043717][ C0] ? __dev_queue_xmit+0x281/0x3540 [ 1085.048854][ C0] ? update_stack_state+0x171/0x490 [ 1085.054069][ C0] ? __cfi___dev_queue_xmit+0x10/0x10 [ 1085.059460][ C0] ? ret_from_fork+0x1f/0x30 [ 1085.064069][ C0] ? eth_header+0x119/0x1f0 [ 1085.068598][ C0] ? memcpy+0x56/0x70 [ 1085.072593][ C0] ? eth_header+0x119/0x1f0 [ 1085.077126][ C0] ? __cfi_eth_header+0x10/0x10 [ 1085.081991][ C0] ? vlan_passthru_hard_header+0xf3/0x120 [ 1085.087825][ C0] neigh_connected_output+0x46f/0x500 [ 1085.093234][ C0] ip6_finish_output2+0x1619/0x18b0 [ 1085.098496][ C0] ? ip6t_do_table+0x1c7/0x1560 [ 1085.103365][ C0] ? __cfi_ip6_finish_output2+0x10/0x10 [ 1085.108920][ C0] ? ip6table_mangle_hook+0x262/0x7b0 [ 1085.114328][ C0] ip6_finish_output+0x60b/0xbe0 [ 1085.119281][ C0] ip6_output+0x1fa/0x410 [ 1085.123673][ C0] ? __cfi_ip6_output+0x10/0x10 [ 1085.128531][ C0] ? __cfi_ip6_finish_output+0x10/0x10 [ 1085.133932][ C1] FAULT_INJECTION: forcing a failure. [ 1085.133932][ C1] name failslab, interval 1, probability 10, space 0, times 57 [ 1085.134005][ C0] ? __cfi_ip6t_do_table+0x10/0x10 [ 1085.151878][ C0] ndisc_send_skb+0x7c8/0xcd0 [ 1085.156573][ C0] ? __cfi_ndisc_send_skb+0x10/0x10 [ 1085.161788][ C0] ? __cfi_dst_output+0x10/0x10 [ 1085.166651][ C0] ? memcpy+0x56/0x70 [ 1085.170653][ C0] ? __ndisc_fill_addr_option+0xde/0x130 [ 1085.176292][ C0] ndisc_send_rs+0x66a/0x870 [ 1085.180897][ C0] addrconf_rs_timer+0x35a/0x600 [ 1085.185850][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1085.191368][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 1085.196412][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1085.201990][ C0] ? wg_expired_retransmit_handshake+0xd8/0x250 [ 1085.208275][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1085.213758][ C0] call_timer_fn+0x46/0x2a0 [ 1085.218314][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1085.223793][ C0] __run_timers+0x646/0x9b0 [ 1085.228319][ C0] ? calc_index+0x200/0x200 [ 1085.232855][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1085.238073][ C0] run_timer_softirq+0x6a/0xf0 [ 1085.242861][ C0] handle_softirqs+0x1d7/0x600 [ 1085.247664][ C0] __irq_exit_rcu+0x52/0xf0 [ 1085.252174][ C0] irq_exit_rcu+0x9/0x10 [ 1085.256429][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1085.262085][ C0] [ 1085.265022][ C0] [ 1085.267960][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1085.273971][ C0] RIP: 0010:__printk_cpu_sync_wait+0xb/0x40 [ 1085.279898][ C0] Code: 1d 5f 00 4c 89 33 5b 41 5c 41 5e 41 5f 5d c3 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 e8 17 92 19 00 f3 90 <48> c7 c7 c0 b9 11 87 be 04 00 00 00 e8 24 1f 5f 00 8b 05 7e e5 b9 [ 1085.299516][ C0] RSP: 0018:ffffc90000a8f950 EFLAGS: 00000293 [ 1085.305596][ C0] RAX: ffffffff8157d44c RBX: ffffffff860afda0 RCX: ffff888116e65100 [ 1085.313585][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8711b9c0 [ 1085.321567][ C0] RBP: ffffc90000a8f950 R08: 0000000000000003 R09: 0000000000000004 [ 1085.329571][ C0] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 1085.337553][ C0] R13: 0000000000000200 R14: dffffc0000000004 R15: 1ffff92000151f2c [ 1085.345533][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1085.350926][ C0] dump_stack_lvl+0xce/0x170 [ 1085.355538][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1085.360580][ C0] ? timer_update_keys+0xb0/0xb0 [ 1085.365537][ C0] ? debug_smp_processor_id+0x17/0x20 [ 1085.370927][ C0] dump_stack+0x15/0x24 [ 1085.375098][ C0] should_fail_ex+0x3bf/0x510 [ 1085.379788][ C0] __should_failslab+0xac/0xf0 [ 1085.384568][ C0] should_failslab+0x9/0x20 [ 1085.389109][ C0] kmem_cache_alloc_node+0x42/0x330 [ 1085.394332][ C0] ? __alloc_skb+0xe8/0x4a0 [ 1085.398870][ C0] __alloc_skb+0xe8/0x4a0 [ 1085.403207][ C0] wg_socket_send_buffer_to_peer+0x37/0x170 [ 1085.409137][ C0] ? ktime_get_coarse_with_offset+0x153/0x1a0 [ 1085.415218][ C0] wg_packet_handshake_send_worker+0x200/0x290 [ 1085.421384][ C0] ? __cfi_wg_packet_handshake_send_worker+0x10/0x10 [ 1085.428082][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1085.433907][ C0] ? try_to_wake_up+0x622/0x1250 [ 1085.438863][ C0] process_one_work+0x717/0xc30 [ 1085.443724][ C0] worker_thread+0xa4d/0x11d0 [ 1085.448409][ C0] kthread+0x281/0x320 [ 1085.452483][ C0] ? __cfi_worker_thread+0x10/0x10 [ 1085.457625][ C0] ? __cfi_kthread+0x10/0x10 [ 1085.462232][ C0] ret_from_fork+0x1f/0x30 [ 1085.466669][ C0] [ 1085.469696][ C1] CPU: 1 PID: 17842 Comm: syz.5.5892 Tainted: G D W syzkaller #0 [ 1085.469731][ C0] FAULT_INJECTION: forcing a failure. [ 1085.469731][ C0] name failslab, interval 1, probability 10, space 0, times 56 [ 1085.478663][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1085.478676][ C1] Call Trace: [ 1085.478684][ C1] [ 1085.507606][ C1] __dump_stack+0x21/0x24 [ 1085.511953][ C1] dump_stack_lvl+0x110/0x170 [ 1085.516654][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1085.521693][ C1] ? detach_entity_load_avg+0x790/0x790 [ 1085.527250][ C1] dump_stack+0x15/0x24 [ 1085.531420][ C1] should_fail_ex+0x3bf/0x510 [ 1085.536116][ C1] __should_failslab+0xac/0xf0 [ 1085.540896][ C1] should_failslab+0x9/0x20 [ 1085.545420][ C1] kmem_cache_alloc_node+0x42/0x330 [ 1085.550653][ C1] ? __alloc_skb+0xe8/0x4a0 [ 1085.555181][ C1] __alloc_skb+0xe8/0x4a0 [ 1085.559521][ C1] ndisc_send_rs+0x31d/0x870 [ 1085.564121][ C1] ? ipv6_get_lladdr+0x1be/0x200 [ 1085.569072][ C1] addrconf_rs_timer+0x35a/0x600 [ 1085.574029][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1085.579504][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1085.584971][ C1] call_timer_fn+0x46/0x2a0 [ 1085.589592][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1085.595086][ C1] __run_timers+0x646/0x9b0 [ 1085.599610][ C1] ? calc_index+0x200/0x200 [ 1085.604156][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 1085.609392][ C1] run_timer_softirq+0x6a/0xf0 [ 1085.614178][ C1] handle_softirqs+0x1d7/0x600 [ 1085.618955][ C1] __irq_exit_rcu+0x52/0xf0 [ 1085.623477][ C1] irq_exit_rcu+0x9/0x10 [ 1085.627732][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1085.633396][ C1] [ 1085.636424][ C1] [ 1085.639378][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1085.645389][ C1] RIP: 0010:smp_call_function_many_cond+0x854/0x940 [ 1085.652027][ C1] Code: 41 8b 1f 89 de 83 e6 01 31 ff e8 77 72 09 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 0a e8 43 6e 09 00 e9 38 ff ff ff f3 90 <41> 0f b6 44 1d 00 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 1a ff ff [ 1085.671663][ C1] RSP: 0018:ffffc900028f7560 EFLAGS: 00000246 [ 1085.677749][ C1] RAX: ffffffff8167f820 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1085.685733][ C1] RDX: ffffc90001a1b000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1085.693723][ C1] RBP: ffffc900028f7698 R08: ffff8881f6f390d7 R09: 1ffff1103ede721a [ 1085.701734][ C1] R10: 0000000000000000 R11: ffffffff8134b650 R12: 1ffff1103ede7218 [ 1085.709713][ C1] R13: 1ffff1103edc7ae1 R14: 0000000000000000 R15: ffff8881f6e3d708 [ 1085.717693][ C1] ? __cfi_x2apic_send_IPI+0x10/0x10 [ 1085.722997][ C1] ? smp_call_function_many_cond+0x870/0x940 [ 1085.729000][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 1085.734046][ C1] ? smp_call_function_many+0x40/0x40 [ 1085.739437][ C1] ? __schedule+0x8fe/0x14b0 [ 1085.744083][ C1] ? text_poke+0x30/0x30 [ 1085.748352][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 1085.753748][ C1] ? __cfi_x2apic_send_IPI+0x10/0x10 [ 1085.759056][ C1] ? __cfi_do_sync_core+0x10/0x10 [ 1085.764113][ C1] on_each_cpu_cond_mask+0x43/0x80 [ 1085.769243][ C1] text_poke_bp_batch+0x585/0x600 [ 1085.774285][ C1] ? text_poke_loc_init+0x560/0x560 [ 1085.779515][ C1] ? __kasan_check_write+0x14/0x20 [ 1085.784642][ C1] ? mutex_lock+0x93/0x1b0 [ 1085.789080][ C1] ? bit_wait_io_timeout+0xff/0x120 [ 1085.794322][ C1] ? __schedule+0x8fe/0x14b0 [ 1085.798957][ C1] text_poke_finish+0x1a/0x30 [ 1085.803648][ C1] arch_jump_label_transform_apply+0x15/0x30 [ 1085.809644][ C1] __jump_label_update+0x38f/0x3b0 [ 1085.814765][ C1] jump_label_update+0x39b/0x450 [ 1085.819802][ C1] __static_key_slow_dec_cpuslocked+0xf7/0x150 [ 1085.825977][ C1] static_key_slow_dec+0x45/0x90 [ 1085.830933][ C1] preempt_notifier_dec+0x10/0x20 [ 1085.835977][ C1] kvm_put_kvm+0x11ca/0x13f0 [ 1085.840592][ C1] kvm_vcpu_release+0x57/0x60 [ 1085.845284][ C1] ? __cfi_kvm_vcpu_release+0x10/0x10 [ 1085.850673][ C1] __fput+0x1fd/0x8f0 [ 1085.854688][ C1] ____fput+0x15/0x20 [ 1085.858690][ C1] task_work_run+0x1e1/0x250 [ 1085.863299][ C1] ? __cfi_task_work_run+0x10/0x10 [ 1085.868429][ C1] ? __stack_depot_save+0x36/0x490 [ 1085.873646][ C1] get_signal+0x12e8/0x1700 [ 1085.878211][ C1] ? kasan_record_aux_stack+0xe/0x10 [ 1085.883516][ C1] ? task_work_add+0x7f/0x330 [ 1085.888293][ C1] ? fput+0xe1/0x1a0 [ 1085.892202][ C1] ? __se_sys_ioctl+0x192/0x1b0 [ 1085.897096][ C1] ? x64_sys_call+0x58b/0x9a0 [ 1085.901800][ C1] ? do_syscall_64+0x4c/0xa0 [ 1085.906418][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1085.912521][ C1] ? __cfi_get_signal+0x10/0x10 [ 1085.917403][ C1] arch_do_signal_or_restart+0xd1/0x11c0 [ 1085.923065][ C1] ? kick_process+0xee/0x160 [ 1085.927677][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1085.933850][ C1] ? task_work_add+0x2cb/0x330 [ 1085.938636][ C1] ? __cfi_task_work_add+0x10/0x10 [ 1085.943768][ C1] ? fput+0x15b/0x1a0 [ 1085.947766][ C1] exit_to_user_mode_loop+0x7a/0xb0 [ 1085.953062][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 1085.958537][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 1085.964015][ C1] do_syscall_64+0x58/0xa0 [ 1085.968446][ C1] ? clear_bhb_loop+0x30/0x80 [ 1085.973143][ C1] ? clear_bhb_loop+0x30/0x80 [ 1085.977864][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1085.983787][ C1] RIP: 0033:0x7fb47f79df99 [ 1085.988226][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.007848][ C1] RSP: 002b:00007fb480637028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1086.016272][ C1] RAX: fffffffffffffffc RBX: 00007fb47fa26090 RCX: 00007fb47f79df99 [ 1086.024275][ C1] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1086.032265][ C1] RBP: 00007fb47f834ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1086.040248][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1086.048242][ C1] R13: 00007fb47fa26128 R14: 00007fb47fa26090 R15: 00007ffdc9e05958 [ 1086.056244][ C1] [ 1086.059286][ C0] CPU: 0 PID: 2865 Comm: kworker/u4:9 Tainted: G D W syzkaller #0 [ 1086.068331][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1086.078409][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 1086.085386][ C0] Call Trace: [ 1086.088680][ C0] [ 1086.091620][ C0] __dump_stack+0x21/0x24 [ 1086.096056][ C0] dump_stack_lvl+0x110/0x170 [ 1086.100756][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1086.105799][ C0] ? skb_network_protocol+0x52f/0x790 [ 1086.111214][ C0] dump_stack+0x15/0x24 [ 1086.115396][ C0] should_fail_ex+0x3bf/0x510 [ 1086.120086][ C0] ? skb_clone+0x1e8/0x380 [ 1086.124517][ C0] __should_failslab+0xac/0xf0 [ 1086.129311][ C0] should_failslab+0x9/0x20 [ 1086.133824][ C0] kmem_cache_alloc+0x3b/0x320 [ 1086.138617][ C0] skb_clone+0x1e8/0x380 [ 1086.142966][ C0] dev_queue_xmit_nit+0x245/0xab0 [ 1086.148009][ C0] ? irqtime_account_irq+0xc4/0x240 [ 1086.153264][ C0] dev_hard_start_xmit+0x15f/0x730 [ 1086.158401][ C0] __dev_queue_xmit+0x1989/0x3540 [ 1086.163445][ C0] ? __dev_queue_xmit+0x281/0x3540 [ 1086.168599][ C0] ? __cfi___dev_queue_xmit+0x10/0x10 [ 1086.173989][ C0] ? skb_clone+0x1e8/0x380 [ 1086.178420][ C0] ? __should_failslab+0xac/0xf0 [ 1086.183378][ C0] ? should_failslab+0x9/0x20 [ 1086.188068][ C0] ? kmem_cache_alloc+0x3b/0x320 [ 1086.193028][ C0] ? skb_clone+0x223/0x380 [ 1086.197460][ C0] ? dev_queue_xmit_nit+0x8e4/0xab0 [ 1086.202671][ C0] vlan_dev_hard_start_xmit+0x2f8/0x530 [ 1086.208234][ C0] dev_hard_start_xmit+0x207/0x730 [ 1086.213365][ C0] __dev_queue_xmit+0x1989/0x3540 [ 1086.218414][ C0] ? __dev_queue_xmit+0x281/0x3540 [ 1086.223540][ C0] ? update_stack_state+0x171/0x490 [ 1086.228755][ C0] ? __cfi___dev_queue_xmit+0x10/0x10 [ 1086.234144][ C0] ? ret_from_fork+0x1f/0x30 [ 1086.238751][ C0] ? eth_header+0x119/0x1f0 [ 1086.243284][ C0] ? memcpy+0x56/0x70 [ 1086.247294][ C0] ? eth_header+0x119/0x1f0 [ 1086.251813][ C0] ? __cfi_eth_header+0x10/0x10 [ 1086.256679][ C0] ? vlan_passthru_hard_header+0xf3/0x120 [ 1086.262437][ C0] neigh_connected_output+0x46f/0x500 [ 1086.267829][ C0] ip6_finish_output2+0x1619/0x18b0 [ 1086.273044][ C0] ? ip6t_do_table+0x1c7/0x1560 [ 1086.277931][ C0] ? __cfi_ip6_finish_output2+0x10/0x10 [ 1086.283493][ C0] ? ip6table_mangle_hook+0x262/0x7b0 [ 1086.288880][ C0] ip6_finish_output+0x60b/0xbe0 [ 1086.293841][ C0] ip6_output+0x1fa/0x410 [ 1086.298188][ C0] ? __cfi_ip6_output+0x10/0x10 [ 1086.303052][ C0] ? __cfi_ip6_finish_output+0x10/0x10 [ 1086.308521][ C0] ? __cfi_ip6t_do_table+0x10/0x10 [ 1086.313650][ C0] ndisc_send_skb+0x7c8/0xcd0 [ 1086.318366][ C0] ? __cfi_ndisc_send_skb+0x10/0x10 [ 1086.323574][ C0] ? __cfi_dst_output+0x10/0x10 [ 1086.328437][ C0] ? memcpy+0x56/0x70 [ 1086.332429][ C0] ? __ndisc_fill_addr_option+0xde/0x130 [ 1086.338074][ C0] ndisc_send_rs+0x66a/0x870 [ 1086.342678][ C0] addrconf_rs_timer+0x35a/0x600 [ 1086.347631][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1086.353104][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 1086.358208][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1086.363771][ C0] ? wg_expired_retransmit_handshake+0xd8/0x250 [ 1086.370029][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1086.375505][ C0] call_timer_fn+0x46/0x2a0 [ 1086.380027][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1086.385501][ C0] __run_timers+0x646/0x9b0 [ 1086.390032][ C0] ? calc_index+0x200/0x200 [ 1086.394565][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1086.399786][ C0] run_timer_softirq+0x6a/0xf0 [ 1086.404565][ C0] handle_softirqs+0x1d7/0x600 [ 1086.409350][ C0] __irq_exit_rcu+0x52/0xf0 [ 1086.413866][ C0] irq_exit_rcu+0x9/0x10 [ 1086.418140][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1086.423789][ C0] [ 1086.426729][ C0] [ 1086.429669][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1086.435671][ C0] RIP: 0010:__printk_cpu_sync_wait+0xb/0x40 [ 1086.441605][ C0] Code: 1d 5f 00 4c 89 33 5b 41 5c 41 5e 41 5f 5d c3 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 e8 17 92 19 00 f3 90 <48> c7 c7 c0 b9 11 87 be 04 00 00 00 e8 24 1f 5f 00 8b 05 7e e5 b9 [ 1086.461224][ C0] RSP: 0018:ffffc90000a8f950 EFLAGS: 00000293 [ 1086.467295][ C0] RAX: ffffffff8157d44c RBX: ffffffff860afda0 RCX: ffff888116e65100 [ 1086.475283][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8711b9c0 [ 1086.481136][ C1] FAULT_INJECTION: forcing a failure. [ 1086.481136][ C1] name failslab, interval 1, probability 10, space 0, times 55 [ 1086.483265][ C0] RBP: ffffc90000a8f950 R08: 0000000000000003 R09: 0000000000000004 [ 1086.504088][ C0] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 1086.512099][ C0] R13: 0000000000000200 R14: dffffc0000000004 R15: 1ffff92000151f2c [ 1086.520098][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1086.525499][ C0] dump_stack_lvl+0xce/0x170 [ 1086.530129][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1086.535175][ C0] ? timer_update_keys+0xb0/0xb0 [ 1086.540144][ C0] ? debug_smp_processor_id+0x17/0x20 [ 1086.545530][ C0] dump_stack+0x15/0x24 [ 1086.549694][ C0] should_fail_ex+0x3bf/0x510 [ 1086.554382][ C0] __should_failslab+0xac/0xf0 [ 1086.559180][ C0] should_failslab+0x9/0x20 [ 1086.563698][ C0] kmem_cache_alloc_node+0x42/0x330 [ 1086.568916][ C0] ? __alloc_skb+0xe8/0x4a0 [ 1086.573437][ C0] __alloc_skb+0xe8/0x4a0 [ 1086.577780][ C0] wg_socket_send_buffer_to_peer+0x37/0x170 [ 1086.583688][ C0] ? ktime_get_coarse_with_offset+0x153/0x1a0 [ 1086.589785][ C0] wg_packet_handshake_send_worker+0x200/0x290 [ 1086.595961][ C0] ? __cfi_wg_packet_handshake_send_worker+0x10/0x10 [ 1086.602654][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1086.608474][ C0] ? try_to_wake_up+0x622/0x1250 [ 1086.613433][ C0] process_one_work+0x717/0xc30 [ 1086.618300][ C0] worker_thread+0xa4d/0x11d0 [ 1086.622992][ C0] kthread+0x281/0x320 [ 1086.627095][ C0] ? __cfi_worker_thread+0x10/0x10 [ 1086.632237][ C0] ? __cfi_kthread+0x10/0x10 [ 1086.636851][ C0] ret_from_fork+0x1f/0x30 [ 1086.641296][ C0] [ 1086.644333][ C1] CPU: 1 PID: 1 Comm: init Tainted: G D W syzkaller #0 [ 1086.644503][ C0] FAULT_INJECTION: forcing a failure. [ 1086.644503][ C0] name failslab, interval 1, probability 10, space 0, times 54 [ 1086.652428][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1086.652443][ C1] Call Trace: [ 1086.652449][ C1] [ 1086.681390][ C1] __dump_stack+0x21/0x24 [ 1086.685745][ C1] dump_stack_lvl+0x110/0x170 [ 1086.690451][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1086.695485][ C1] ? __kasan_check_write+0x14/0x20 [ 1086.700615][ C1] ? resched_curr+0x114/0x3a0 [ 1086.705308][ C1] dump_stack+0x15/0x24 [ 1086.709476][ C1] should_fail_ex+0x3bf/0x510 [ 1086.714163][ C1] __should_failslab+0xac/0xf0 [ 1086.718961][ C1] should_failslab+0x9/0x20 [ 1086.723481][ C1] kmem_cache_alloc_node+0x42/0x330 [ 1086.728706][ C1] ? __alloc_skb+0xe8/0x4a0 [ 1086.733245][ C1] __alloc_skb+0xe8/0x4a0 [ 1086.737635][ C1] wg_packet_send_keepalive+0x62/0x1c0 [ 1086.743211][ C1] ? wg_expired_send_persistent_keepalive+0x44/0x80 [ 1086.749821][ C1] wg_expired_send_persistent_keepalive+0x53/0x80 [ 1086.756281][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 1086.763419][ C1] call_timer_fn+0x46/0x2a0 [ 1086.767941][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 1086.775074][ C1] __run_timers+0x646/0x9b0 [ 1086.779593][ C1] ? calc_index+0x200/0x200 [ 1086.784128][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 1086.789356][ C1] run_timer_softirq+0x6a/0xf0 [ 1086.794136][ C1] handle_softirqs+0x1d7/0x600 [ 1086.798915][ C1] __irq_exit_rcu+0x52/0xf0 [ 1086.803429][ C1] irq_exit_rcu+0x9/0x10 [ 1086.807683][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1086.813341][ C1] [ 1086.816297][ C1] [ 1086.819242][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1086.825234][ C1] RIP: 0010:__printk_cpu_sync_wait+0xb/0x40 [ 1086.831140][ C1] Code: 1d 5f 00 4c 89 33 5b 41 5c 41 5e 41 5f 5d c3 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 e8 17 92 19 00 f3 90 <48> c7 c7 c0 b9 11 87 be 04 00 00 00 e8 24 1f 5f 00 8b 05 7e e5 b9 [ 1086.850752][ C1] RSP: 0018:ffffc90000017850 EFLAGS: 00000293 [ 1086.856828][ C1] RAX: ffffffff8157d44c RBX: ffffffff860afda0 RCX: ffff88810028d100 [ 1086.864834][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8711b9c0 [ 1086.872811][ C1] RBP: ffffc90000017850 R08: 0000000000000003 R09: 0000000000000004 [ 1086.880798][ C1] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 1086.888795][ C1] R13: 0000000000000200 R14: dffffc0000000004 R15: 1ffff92000002f0c [ 1086.896789][ C1] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1086.902192][ C1] dump_stack_lvl+0xce/0x170 [ 1086.906814][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1086.911878][ C1] dump_stack+0x15/0x24 [ 1086.916056][ C1] should_fail_ex+0x3bf/0x510 [ 1086.920754][ C1] ? posix_lock_inode+0x35e/0x34e0 [ 1086.925888][ C1] __should_failslab+0xac/0xf0 [ 1086.930697][ C1] should_failslab+0x9/0x20 [ 1086.935219][ C1] kmem_cache_alloc+0x3b/0x320 [ 1086.939998][ C1] posix_lock_inode+0x35e/0x34e0 [ 1086.944947][ C1] ? file_has_perm+0x52d/0x700 [ 1086.949733][ C1] ? match_file+0x130/0x130 [ 1086.954273][ C1] ? posix_lock_file+0x50/0x50 [ 1086.959046][ C1] ? security_file_lock+0x8a/0xb0 [ 1086.964092][ C1] fcntl_setlk+0xa38/0x1070 [ 1086.968613][ C1] ? __cfi_fcntl_setlk+0x10/0x10 [ 1086.973570][ C1] ? __cfi_avc_has_perm+0x10/0x10 [ 1086.978611][ C1] ? __kasan_check_write+0x14/0x20 [ 1086.983736][ C1] do_fcntl+0x582/0x1110 [ 1086.987990][ C1] ? match_file+0x130/0x130 [ 1086.992513][ C1] ? kill_fasync+0x210/0x210 [ 1086.997118][ C1] ? security_file_fcntl+0x95/0xc0 [ 1087.002259][ C1] __se_sys_fcntl+0xdf/0x1b0 [ 1087.006866][ C1] ? debug_smp_processor_id+0x17/0x20 [ 1087.012258][ C1] __x64_sys_fcntl+0x7b/0x90 [ 1087.016858][ C1] x64_sys_call+0x1a9/0x9a0 [ 1087.021378][ C1] do_syscall_64+0x4c/0xa0 [ 1087.025835][ C1] ? clear_bhb_loop+0x30/0x80 [ 1087.030546][ C1] ? clear_bhb_loop+0x30/0x80 [ 1087.035231][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1087.041240][ C1] RIP: 0033:0x7f93d7794add [ 1087.045677][ C1] Code: 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 c7 44 24 b8 10 00 00 00 48 89 44 24 c8 83 fe 09 74 1a b8 48 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 23 c3 66 2e 0f 1f 84 00 00 00 00 00 48 8d 54 [ 1087.065299][ C1] RSP: 002b:00007ffc43d62c08 EFLAGS: 00000293 ORIG_RAX: 0000000000000048 [ 1087.073731][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f93d7794add [ 1087.081725][ C1] RDX: 00007ffc43d62c10 RSI: 0000000000000007 RDI: 0000000000000003 [ 1087.089709][ C1] RBP: 0000000000000003 R08: 00007ffc43d62c30 R09: 0000000000000000 [ 1087.097692][ C1] R10: 0000000000000008 R11: 0000000000000293 R12: 0000000000000000 [ 1087.105697][ C1] R13: 00007ffc43d62c30 R14: 0000000000000002 R15: 0000561f7890ad98 [ 1087.113685][ C1] [ 1087.116716][ C0] CPU: 0 PID: 2865 Comm: kworker/u4:9 Tainted: G D W syzkaller #0 [ 1087.118946][ T142] FAULT_INJECTION: forcing a failure. [ 1087.118946][ T142] name failslab, interval 1, probability 10, space 0, times 51 [ 1087.125764][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1087.125780][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 1087.155560][ C0] Call Trace: [ 1087.158850][ C0] [ 1087.161725][ C0] __dump_stack+0x21/0x24 [ 1087.166073][ C0] dump_stack_lvl+0x110/0x170 [ 1087.170767][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1087.175808][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1087.181658][ C0] ? ref_tracker_alloc+0x345/0x4a0 [ 1087.186788][ C0] dump_stack+0x15/0x24 [ 1087.190958][ C0] should_fail_ex+0x3bf/0x510 [ 1087.195644][ C0] __should_failslab+0xac/0xf0 [ 1087.200426][ C0] should_failslab+0x9/0x20 [ 1087.204945][ C0] __kmem_cache_alloc_node+0x3d/0x2d0 [ 1087.210338][ C0] ? dst_cow_metrics_generic+0x55/0x1c0 [ 1087.215944][ C0] ? dst_cow_metrics_generic+0x55/0x1c0 [ 1087.221501][ C0] kmalloc_trace+0x29/0xb0 [ 1087.225933][ C0] dst_cow_metrics_generic+0x55/0x1c0 [ 1087.231328][ C0] icmp6_dst_alloc+0x389/0x510 [ 1087.236118][ C0] ndisc_send_skb+0x2ad/0xcd0 [ 1087.240842][ C0] ? __cfi_ndisc_send_skb+0x10/0x10 [ 1087.246063][ C0] ? memcpy+0x56/0x70 [ 1087.250055][ C0] ? __ndisc_fill_addr_option+0xde/0x130 [ 1087.255693][ C0] ndisc_send_rs+0x66a/0x870 [ 1087.260329][ C0] addrconf_rs_timer+0x35a/0x600 [ 1087.265285][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1087.270768][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 1087.275808][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1087.281395][ C0] ? wg_expired_retransmit_handshake+0xd8/0x250 [ 1087.287668][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1087.293140][ C0] call_timer_fn+0x46/0x2a0 [ 1087.297661][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 1087.303143][ C0] __run_timers+0x646/0x9b0 [ 1087.307661][ C0] ? calc_index+0x200/0x200 [ 1087.312184][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1087.317399][ C0] run_timer_softirq+0x6a/0xf0 [ 1087.322182][ C0] handle_softirqs+0x1d7/0x600 [ 1087.326965][ C0] __irq_exit_rcu+0x52/0xf0 [ 1087.331484][ C0] irq_exit_rcu+0x9/0x10 [ 1087.335734][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1087.341386][ C0] [ 1087.344328][ C0] [ 1087.347270][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1087.353285][ C0] RIP: 0010:__printk_cpu_sync_wait+0xb/0x40 [ 1087.359236][ C0] Code: 1d 5f 00 4c 89 33 5b 41 5c 41 5e 41 5f 5d c3 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 e8 17 92 19 00 f3 90 <48> c7 c7 c0 b9 11 87 be 04 00 00 00 e8 24 1f 5f 00 8b 05 7e e5 b9 [ 1087.378867][ C0] RSP: 0018:ffffc90000a8f950 EFLAGS: 00000293 [ 1087.384952][ C0] RAX: ffffffff8157d44c RBX: ffffffff860afda0 RCX: ffff888116e65100 [ 1087.393120][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8711b9c0 [ 1087.401110][ C0] RBP: ffffc90000a8f950 R08: 0000000000000003 R09: 0000000000000004 [ 1087.409104][ C0] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 1087.417120][ C0] R13: 0000000000000200 R14: dffffc0000000004 R15: 1ffff92000151f2c [ 1087.425107][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1087.430500][ C0] dump_stack_lvl+0xce/0x170 [ 1087.435133][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1087.440174][ C0] ? timer_update_keys+0xb0/0xb0 [ 1087.445145][ C0] ? debug_smp_processor_id+0x17/0x20 [ 1087.450531][ C0] dump_stack+0x15/0x24 [ 1087.454700][ C0] should_fail_ex+0x3bf/0x510 [ 1087.459391][ C0] __should_failslab+0xac/0xf0 [ 1087.464167][ C0] should_failslab+0x9/0x20 [ 1087.468678][ C0] kmem_cache_alloc_node+0x42/0x330 [ 1087.473908][ C0] ? __alloc_skb+0xe8/0x4a0 [ 1087.478422][ C0] __alloc_skb+0xe8/0x4a0 [ 1087.482781][ C0] wg_socket_send_buffer_to_peer+0x37/0x170 [ 1087.488719][ C0] ? ktime_get_coarse_with_offset+0x153/0x1a0 [ 1087.494796][ C0] wg_packet_handshake_send_worker+0x200/0x290 [ 1087.501003][ C0] ? __cfi_wg_packet_handshake_send_worker+0x10/0x10 [ 1087.507720][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1087.513543][ C0] ? try_to_wake_up+0x622/0x1250 [ 1087.518508][ C0] process_one_work+0x717/0xc30 [ 1087.523380][ C0] worker_thread+0xa4d/0x11d0 [ 1087.528072][ C0] kthread+0x281/0x320 [ 1087.532151][ C0] ? __cfi_worker_thread+0x10/0x10 [ 1087.537274][ C0] ? __cfi_kthread+0x10/0x10 [ 1087.541886][ C0] ret_from_fork+0x1f/0x30 [ 1087.546322][ C0] [ 1087.549349][ T142] CPU: 1 PID: 142 Comm: dhcpcd Tainted: G D W syzkaller #0 [ 1087.549793][ C0] FAULT_INJECTION: forcing a failure. [ 1087.549793][ C0] name failslab, interval 1, probability 10, space 0, times 50 [ 1087.557789][ T142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1087.557802][ T142] Call Trace: [ 1087.557809][ T142] [ 1087.557817][ T142] __dump_stack+0x21/0x24 [ 1087.591148][ T142] dump_stack_lvl+0x110/0x170 [ 1087.595840][ T142] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1087.600917][ T142] dump_stack+0x15/0x24 [ 1087.605091][ T142] should_fail_ex+0x3bf/0x510 [ 1087.609785][ T142] __should_failslab+0xac/0xf0 [ 1087.614567][ T142] should_failslab+0x9/0x20 [ 1087.619101][ T142] slab_pre_alloc_hook+0x30/0x1d0 [ 1087.624151][ T142] kmem_cache_alloc_lru+0x49/0x280 [ 1087.629277][ T142] ? __d_alloc+0x34/0x6d0 [ 1087.633643][ T142] __d_alloc+0x34/0x6d0 [ 1087.637818][ T142] ? alloc_file+0x49d/0x600 [ 1087.642336][ T142] d_alloc_pseudo+0x1d/0x70 [ 1087.646879][ T142] alloc_file_pseudo+0xe0/0x200 [ 1087.651756][ T142] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 1087.657266][ T142] ? init_peercred+0x25b/0x2c0 [ 1087.662056][ T142] sock_alloc_file+0xba/0x270 [ 1087.666831][ T142] __sys_socketpair+0x3a9/0x5b0 [ 1087.671700][ T142] __x64_sys_socketpair+0x9b/0xb0 [ 1087.676756][ T142] x64_sys_call+0x6e/0x9a0 [ 1087.681201][ T142] do_syscall_64+0x4c/0xa0 [ 1087.685632][ T142] ? clear_bhb_loop+0x30/0x80 [ 1087.690343][ T142] ? clear_bhb_loop+0x30/0x80 [ 1087.695027][ T142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1087.700943][ T142] RIP: 0033:0x7f12567ef73a [ 1087.705383][ T142] Code: 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8e e6 0c 00 f7 d8 64 89 01 48 [ 1087.725086][ T142] RSP: 002b:00007ffdc107cc48 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1087.733521][ T142] RAX: ffffffffffffffda RBX: 0000560d1816e1d0 RCX: 00007f12567ef73a [ 1087.741504][ T142] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000001 [ 1087.749485][ T142] RBP: 00007ffdc109d070 R08: 0000000000000000 R09: 0000000000000001 [ 1087.757465][ T142] R10: 00007ffdc107cc60 R11: 0000000000000246 R12: 00007ffdc107cc60 [ 1087.765452][ T142] R13: 0000000000000001 R14: 0000000000000000 R15: 0000560d158ceac0 [ 1087.773440][ T142] [ 1087.776476][ C0] CPU: 0 PID: 2865 Comm: kworker/u4:9 Tainted: G D W syzkaller #0 [ 1087.777240][ T141] FAULT_INJECTION: forcing a failure. [ 1087.777240][ T141] name failslab, interval 1, probability 10, space 0, times 50 [ 1087.785522][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1087.785539][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 1087.798357][T17857] ---[ end trace 0000000000000000 ]--- [ 1087.808341][ C0] [ 1087.808348][ C0] Call Trace: [ 1087.808356][ C0] [ 1087.808364][ C0] __dump_stack+0x21/0x24 [ 1087.828338][T17857] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 1087.829220][ C0] dump_stack_lvl+0x110/0x170 [ 1087.833550][T17857] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 69 46 09 00 e9 d2 f9 ff ff e8 ef ba c3 ff 0f 0b e8 e8 ba c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 1087.838919][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1087.860329][T17857] RSP: 0018:ffffc90002a87a40 EFLAGS: 00010293 [ 1087.863202][ C0] ? enqueue_timer+0x1b6/0x480 [ 1087.868223][T17857] [ 1087.868230][T17857] RAX: ffffffff81adab58 RBX: 00007f80c1b33000 RCX: ffff88810e429440 [ 1087.874297][ C0] dump_stack+0x15/0x24 [ 1087.892406][T17857] RDX: 0000000000000000 RSI: 00007f80c1b32fff RDI: 00007f80c1b33000 [ 1087.893519][ C0] should_fail_ex+0x3bf/0x510 [ 1087.901494][T17857] RBP: ffffc90002a87c30 R08: ffff88810e429440 R09: 0000000000000003 [ 1087.906178][ C0] __should_failslab+0xac/0xf0 [ 1087.918976][ C0] should_failslab+0x9/0x20 [ 1087.923517][ C0] kmem_cache_alloc_node+0x42/0x330 [ 1087.928735][ C0] ? __alloc_skb+0xe8/0x4a0 [ 1087.933258][ C0] __alloc_skb+0xe8/0x4a0 [ 1087.935244][T17857] R10: 0000000000000003 R11: 0000000000000000 R12: 00007f80c1b32fff [ 1087.937605][ C0] wg_packet_send_keepalive+0x62/0x1c0 [ 1087.945591][T17857] R13: 00007f80c1b33000 R14: dffffc0000000000 R15: 00007f80c1b12000 [ 1087.951076][ C0] ? wg_expired_send_keepalive+0x1f/0x1c0 [ 1087.964790][ C0] ? __cfi_wg_expired_send_keepalive+0x10/0x10 [ 1087.970974][ C0] wg_expired_send_keepalive+0x2e/0x1c0 [ 1087.976565][ C0] ? __cfi_wg_expired_send_keepalive+0x10/0x10 [ 1087.982761][ C0] call_timer_fn+0x46/0x2a0 [ 1087.987288][ C0] ? __cfi_wg_expired_send_keepalive+0x10/0x10 [ 1087.993477][ C0] __run_timers+0x646/0x9b0 [ 1087.995937][T17857] FS: 000055557d7c6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1087.998105][ C0] ? calc_index+0x200/0x200 [ 1088.010000][T17857] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1088.011557][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 1088.018140][T17857] CR2: 00007ffdc109d410 CR3: 000000011bce6000 CR4: 00000000003526a0 [ 1088.023340][ C0] run_timer_softirq+0x6a/0xf0 [ 1088.036128][ C0] handle_softirqs+0x1d7/0x600 [ 1088.040918][ C0] __irq_exit_rcu+0x52/0xf0 [ 1088.045433][ C0] irq_exit_rcu+0x9/0x10 [ 1088.049701][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1088.052796][T17857] DR0: 0000000000000013 DR1: 00000000000001f8 DR2: 0000000000000084 [ 1088.055356][ C0] [ 1088.063372][T17857] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1088.074276][ C0] [ 1088.074361][T17857] Kernel panic - not syncing: Fatal exception [ 1088.077247][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1088.077282][ C0] RIP: 0010:__printk_cpu_sync_wait+0xb/0x40 [ 1088.077309][ C0] Code: 1d 5f 00 4c 89 33 5b 41 5c 41 5e 41 5f 5d c3 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 e8 17 92 19 00 f3 90 <48> c7 c7 c0 b9 11 87 be 04 00 00 00 e8 24 1f 5f 00 8b 05 7e e5 b9 [ 1088.077326][ C0] RSP: 0018:ffffc90000a8f950 EFLAGS: 00000293 [ 1088.077342][ C0] RAX: ffffffff8157d44c RBX: ffffffff860afda0 RCX: ffff888116e65100 [ 1088.077357][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff8711b9c0 [ 1088.077369][ C0] RBP: ffffc90000a8f950 R08: 0000000000000003 R09: 0000000000000004 [ 1088.077382][ C0] R10: dffffc0000000000 R11: fffffbfff0e23738 R12: dffffc0000000000 [ 1088.077396][ C0] R13: 0000000000000200 R14: dffffc0000000004 R15: 1ffff92000151f2c [ 1088.077411][ C0] ? __printk_cpu_sync_wait+0x2c/0x40 [ 1088.077437][ C0] dump_stack_lvl+0xce/0x170 [ 1088.077459][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1088.077480][ C0] ? timer_update_keys+0xb0/0xb0 [ 1088.077504][ C0] ? debug_smp_processor_id+0x17/0x20 [ 1088.077524][ C0] dump_stack+0x15/0x24 [ 1088.077544][ C0] should_fail_ex+0x3bf/0x510 [ 1088.077563][ C0] __should_failslab+0xac/0xf0 [ 1088.077586][ C0] should_failslab+0x9/0x20 [ 1088.077604][ C0] kmem_cache_alloc_node+0x42/0x330 [ 1088.077628][ C0] ? __alloc_skb+0xe8/0x4a0 [ 1088.077647][ C0] __alloc_skb+0xe8/0x4a0 [ 1088.077666][ C0] wg_socket_send_buffer_to_peer+0x37/0x170 [ 1088.077692][ C0] ? ktime_get_coarse_with_offset+0x153/0x1a0 [ 1088.077713][ C0] wg_packet_handshake_send_worker+0x200/0x290 [ 1088.077739][ C0] ? __cfi_wg_packet_handshake_send_worker+0x10/0x10 [ 1088.077788][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1088.077810][ C0] ? try_to_wake_up+0x622/0x1250 [ 1088.077833][ C0] process_one_work+0x717/0xc30 [ 1088.077855][ C0] worker_thread+0xa4d/0x11d0 [ 1088.077877][ C0] kthread+0x281/0x320 [ 1088.077895][ C0] ? __cfi_worker_thread+0x10/0x10 [ 1088.077911][ C0] ? __cfi_kthread+0x10/0x10 [ 1088.077930][ C0] ret_from_fork+0x1f/0x30 [ 1088.077953][ C0] [ 1088.078579][T17857] Kernel Offset: disabled [ 1088.289641][T17857] Rebooting in 86400 seconds..